For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kimhenriksen's avatar
kimhenriksen
Icon for Cirrocumulus rankCirrocumulus
Apr 22, 2021

irule for identifying corporate network..

I am setting up an always on machine tunnel solution using edge client.. but as the dns location isn´t working with the tunnel service I want to create an irule to use in the vpe that would check if ...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Apr 22, 2021

You can use the "ACCESS_POLICY_AGENT_EVENT" so that one time during the policy check before the network resource is assigned you can check the client IP address and set a custom variable after that use an General purpose “empty” object and make a branch rule to check if for example "expr { [mcget {session.vpn.private}] == "1" }" and make so that if the customer is in the private IP range then to not assign a "Network_access" object.

 

https://clouddocs.f5.com/api/irules/ACCESS_POLICY_AGENT_EVENT.html