Forum Discussion

tarma_58716's avatar
tarma_58716
Icon for Nimbostratus rankNimbostratus
Jan 08, 2015

iRule asm-vip target apm-vip

Hi all we need to secure apm portal facing internet with ASM. To do that we have created two VS, one facing internet (asm vs) and an internal vs (apm-vs) on ASM-VS i've created an irule which send al...
application delivery
devops
iRules
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Mar 31, 2016

Hello,

By adding something similar, you will be able to handle citrix and rdp tunnels :

when CLIENT_ACCEPTED {
 virtual /Common/VS_Myvs
}
when CLIENTSSL_HANDSHAKE {
 SSL::collect
}
when CLIENTSSL_DATA {
 set firstline [SSL::payload 0 [string first \r\n [SSL::payload]]]
 if { !($firstline contains "HTTP") } {
  HTTP::disable
  ASM::disable
 }
 SSL::release
}