For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

evick27_28312's avatar
evick27_28312
Icon for Nimbostratus rankNimbostratus
Feb 03, 2014

Have some users getting website attempting to run a local application

We have recent reports of users getting the message, website abc.def.com is attempting to run a local application, do you want to allow this operation? when they are connecting to our SSL VPN APM config. Most users do not. It appears to be after some Microsoft updates came down. Anyone else seeing this?

 

We're running 11.3, pretty basic SSL VPN config.

 

6 Replies

    • evick27_28312's avatar
      evick27_28312
      Icon for Nimbostratus rankNimbostratus
      Thanks for the follow up Mike. Actually, we unchecked Synchronize with Active Directory policies on connection establishment under the network access and the message went away. Believe this was breaking the established certificate trust.
    • Mike_61719's avatar
      Mike_61719
      Icon for Cirrus rankCirrus
      That should not break a certificate trust unless there is some mis-configuration. However, I'm glad its working but your AD policies are not being transferred over as if someone was on an internal network.
    • vandenhoutenp_9's avatar
      vandenhoutenp_9
      Icon for Nimbostratus rankNimbostratus
      Hi Mike, I don't suppose you know specifically where the "Display warning before launching applications" option is held within IE? I can't seem to find it and I'm having this exact issue when using "Synchronize with Active Directory policies on connection establishment". Thanks Peter
  • It's in the trusted site zone location. However, there are additional settings within F5 to eliminate the message as well.

     

    Display warning before launching applications

     

    Enable or disable

     

    If you enable this setting, the system displays security warnings before starting applications from network access, regardless of whether the site is considered a Trusted site. If the check box is not selected, the system displays security warnings if the site is not in the Trusted Sites list.