For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TD_388740's avatar
TD_388740
Icon for Nimbostratus rankNimbostratus
May 07, 2019

L7 https ACL with APM SSL VPN not working

Hi, I am building a POC for Client SSl VPN with F5 APM in AWS. Since we are using AWS I would like to use L7 ACLs instead of L4 since IP addresses keep changing in AWS.   I got it working for http...
acl
aws
BIG-IP Access Policy Manager (APM)
cloud
https
l7
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
May 07, 2019

Do you want to use L7 ACL to filter URL inside a Network Access tunnel?

 

If this what you expect, the problem is that HTTPS is not HTTP with secured content but HTTP inside a TLS tunnel...

 

So until you don't terminate the TLS tunnel on the bigIP, you can't read the HTTP request, and so you can't read the URL...

 

when you create a virtual server with clientSSL profile, it terminate the SSL allowing you to read the HTTP request.