Forum Discussion

Martin_Foidl's avatar
Martin_Foidl
Icon for Cirrus rankCirrus
Feb 04, 2016

LTM+APM SSO only for designated Subnets

Hi,   we have a Problem we have configured a virtual server with an access policy and NTLM-SSO. We use the authentication only for users of pubic subnets. If a user comes out of a private subnet w...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
SSO
vpe
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Feb 05, 2016

Hi,

WEBSSO::disable must be applied to every request and not when user authenticate...

the best way is to disable APM base on IP address in an irule:

when HTTP_REQUEST {
    if { [IP::addr [IP::local_addr]/8 eq 10.0.0.0] || [IP::addr [IP::local_addr]/12 eq 172.16.0.0] || [IP::addr [IP::local_addr]/16 eq 192.168.0.0]} {
        ACCESS::disable
        return
    }
}