Is network access bypassing APM logon pages?
Hello,
Maybe it's a stupid question but I've been wondering about it for a while without finding a proper answer.
Usually, you can either access your web apps remotely through APM or you can use a SSL VPN connection to have a full network access.
Recently when I was connected to the VPN (BigIP Edge Client), I tried to access different web apps through APM in order to test some APM workflows (vpe config) and I noticed I was somehow bypassing the APM logon pages : actually I was able to access the web apps without having the APM logon pages.
Maybe these were silly tests but still i'm wondering : what happened ?
I used an irule to have verbose logs, I saw that my vpn session ID were being used when accessing these web apps.
Is there any credential forwarding ? How does it work ?
Thank you
Thomas
If APM is being the gatekeeper then if you have a VPN session then you are authenticated. If you then want to access the app then you are already authenticated with APM.