For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NetCohort_66543's avatar
NetCohort_66543
Icon for Nimbostratus rankNimbostratus
Jan 14, 2017

Helo with the use of Landing URI's

Hi,

 

I am trying to use "Landing URI"'s in following scenario.

 

User who access /welcome.php should be passthroughed and not be authenticated, but users who access any other site have to beforwarded to the logon page to authenticate. The problem is that a user who uses /welcome.php won't be authenticated but the session let's him browse to each URI of the website without any authentication. If the session is killed and he browses /whatever he will be redirected to the logon page.

 

Any ideas?

 

I attached a screenshot of the policy.

 

Thanks in advance.

 

application delivery
BIG-IP Access Policy Manager (APM)
security

1 Reply

  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Altostratus rankAltostratus
    Jan 15, 2017

    After a session created, successfully authenticated and allowed by APM, at that session you can browse anything related to the Virtual Server. APM does not lookup the policy again, again. It just lookup once. You can add 

    per-request policy
    to accomplish your goal. Or If I were you, I would prefer to write an iRule, If you want to granularly control it.