F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

THi's avatar
THi
Icon for Nimbostratus rankNimbostratus
May 09, 2014

Large number of APM webtop icons: APM webtop with resource selector list?

We need to implement controlled rdp access using APM. Client needs to connect to large number of servers (200-300) using rdp (either browser or rdp client). The servers are domain-joined, so their in...
BIG-IP Access Policy Manager (APM)
security
Amit_Karnik_269's avatar
Amit_Karnik_269
Icon for Nimbostratus rankNimbostratus
Oct 31, 2014

We are trying to do something similar. Currently what we have working is as follows:

 

  1. VS1 with Policy1
  2. VS2 with Policy2

Policy1 allows the user to login. We do AD Auth, Query and based on the users AD group, show him a webtop link for a generic Remote Desktop. Policy1 is ended with Allow

 

The remote desktop link takes the user to a custom page which shows him the collection of RDP servers he has access to. On that page, the user selects 1 of them. The URI of this link is captured by an iRule on VS1.

 

The iRule responds back with an auto submit POST form to VS2 containing the username/password plus the RDP server & screen resolution to use.

 

Policy2 on VS2 accepts the autologon based on the POST form submission and sets up a custom session variable e.g. session.remotedesktop.server and assigns a single RDP resource to the user. This RDP resource has the Host set to session.remotedesktop.server.

 

The user can then use this webtop resource to RDP to the server he chose.

 

We are still having issues with the RDP resource not opening up with FullScreen on Windows 8.