Forum Discussion

Martin_Foidl's avatar
Martin_Foidl
Icon for Cirrus rankCirrus
Feb 04, 2016

LTM+APM SSO only for designated Subnets

Hi,   we have a Problem we have configured a virtual server with an access policy and NTLM-SSO. We use the authentication only for users of pubic subnets. If a user comes out of a private subnet w...
BIG-IP
BIG-IP Access Policy Manager (APM)
security
SSO
vpe
Martin_Foidl's avatar
Martin_Foidl
Icon for Cirrus rankCirrus
Feb 05, 2016

Hi and thanks to all 🙂

 

You brought me to the right way to solve this 🙂

 

I had to modify the code of Stanislas a litte bit but for this it works and my logs are not flooded anymore with useless entries!

 

Code:     
when HTTP_REQUEST {
if {  [IP::addr [IP::local_addr] equals "164.3.0.0/16"] || [IP::addr [IP::local_addr] equals "172.16.0.0/12"] || [IP::addr [IP::local_addr] equals "192.168.0.0/16"] || [IP::addr [IP::local_addr] equals "10.0.0.0/8"]} {
    WEBSSO::disable
    return
}
}

Thanks Martin