For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

shashe's avatar
shashe
Icon for Cirrus rankCirrus
Dec 25, 2022

How do I allow VPN connections from Edgeclients only?

On my Big-IP 16.1.2 APM-VE, I enabled fatclient check policy that is checking for the follwoing client types: Expression: Client type is Portal Client OR  Client type is Standalone Client OR  Clie...
security
shashe's avatar
shashe
Icon for Cirrus rankCirrus
Dec 28, 2022

no both windows and mac. I added a condition to match "Edgeclient" or "MacEdgeClient" in the user-agent string to the policy. it seems working now.

buulam's avatar
buulam
Icon for Admin rankAdmin
Dec 28, 2022

Is it consistent behavior? I believe the client does make an initial GET via mini browser first to obtain login details so your additional condition would be correct

  • shashe's avatar
    shashe
    Icon for Cirrus rankCirrus
    Dec 28, 2022

    I hven't heard any issues so far and not seeing any denied sessions. So I say it's catching the intiail get requests. Maybe if the user-agent changes in future, I start seeing the issue again???

    • buulam's avatar
      buulam
      Icon for Admin rankAdmin
      Dec 28, 2022

      That's possible but I don't believe it changes significantly over time