For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bullish_35184's avatar
Bullish_35184
Icon for Nimbostratus rankNimbostratus
Jun 18, 2013

Forcing SSL VPN Client Traffic through a certain proxy (on APM).

So, while using Nortel IPSEC VPN I can edit my Internet Options / Connections / LAN Settings and enter an IP for my Proxy Server. This will force my internal internet traffic through that device. I...
BIG-IP Access Policy Manager (APM)
remote access
security
Bullish_35184's avatar
Bullish_35184
Icon for Nimbostratus rankNimbostratus
Jul 17, 2013
Can't be done. Here is the response from F5 Support:

 

 

It is not going to work to change routing on the LAN side of APM Network Access, by forcing things on the browser side. The best explanation I can think of is this;

 

 

The client / browser communication is with the APM, in an SSL client side connection. The APM, upon successful negotiation of that Access session, opens a connection to the Lan side, setting up a lease pool address and proxying between client connection and LAN connections.

 

 

Changes on the client side, in the browser for instance, affect the client side connection. Desired changes of routing on the LAN side are not going to be initiated by changes in the browser.

 

 

Once the Network Access connection is set up; that is, once an SSL vpn connection to APM from the client is established, the routing on LAN side is also established. We do not expect changes in the client browser settings to change the LAN routing tables.