Forum Discussion

shashe's avatar
shashe
Icon for Cirrus rankCirrus
Dec 25, 2022

How do I allow VPN connections from Edgeclients only?

On my Big-IP 16.1.2 APM-VE, I enabled fatclient check policy that is checking for the follwoing client types: Expression: Client type is Portal Client OR  Client type is Standalone Client OR  Clie...
security
shashe's avatar
shashe
Icon for Cirrus rankCirrus

no both windows and mac. I added a condition to match "Edgeclient" or "MacEdgeClient" in the user-agent string to the policy. it seems working now.

buulam's avatar
buulam
Icon for Admin rankAdmin
Dec 28, 2022

Is it consistent behavior? I believe the client does make an initial GET via mini browser first to obtain login details so your additional condition would be correct

  • shashe's avatar
    shashe
    Icon for Cirrus rankCirrus
    Dec 28, 2022

    I hven't heard any issues so far and not seeing any denied sessions. So I say it's catching the intiail get requests. Maybe if the user-agent changes in future, I start seeing the issue again???

    • buulam's avatar
      buulam
      Icon for Admin rankAdmin
      Dec 28, 2022

      That's possible but I don't believe it changes significantly over time