Forum Discussion

SLGizmo_219768's avatar
SLGizmo_219768
Icon for Nimbostratus rankNimbostratus
Dec 29, 2015

Monitors for Citrix XML Process

I am new to the F5 appliance and working on my documentation of where to find things and I noticed that in our XML monitor it states encoding=*cleartext\">xxxxx. We really don't want this to be sent in clear text and I need some direction on how to encrypt this password. Any assistance would be greatly appreciated.

 

active monitors
BIG-IP Access Policy Manager (APM)
security
  • SLGizmo_219768's avatar
    SLGizmo_219768
    Icon for Nimbostratus rankNimbostratus
    Jan 06, 2016

    No problem and I kinda figured that. So Can I take the existing send string and place this in the same place on the new monitor?

     

    POST /scripts/wpnbr.dll HTTP/1.1\r\nContent-Length: 595\r\nContent-Type: text/xml\r\nConnection: close\r\nHost: www.myhost.com\r\n\r\npermissionsallica30contentMyUserIDMyPasswordmy.comwebtop_prod_api_http_xmlb_monitor0.0.0.0\r\n\r\n

     

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Jan 04, 2016

    Ah sorry. I missed that you were in fact changing from HTTP to HTTPS. Yes, that is correct, you can't change the type.

     

    To change from using HTTP to HTTPS you will need to build a new monitor. Just create a new one with type HTTPS and copy the request & response text. Then of course you'll need to change the pool members from :80 to :443 (Assuming you're using standard HTTP/HTTPS ports).

     

    H

     

  • SLGizmo_219768's avatar
    SLGizmo_219768
    Icon for Nimbostratus rankNimbostratus
    Jan 04, 2016

    I checked the iAPP for the associated monitor and Strict Updates is not selected for this iAPP. However, the associated Monitor will not allow me to change the TYPE from HTTP to HTTPS. I can only build a new monitor and set the type to HTTPS.

     

  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Dec 29, 2015

    Hi Scott...

     

    LTM doesn't come with a built-in Citrix monitor. So it's a custom one. Which means (Unless you've created your config vi an iApp and have strict updates enabled - i.e. made it read-only) you can customise (Edit) to your hearts content.

     

    If you have created your config via an iApp and have strict updates enabled, then no... you can't edit it. Because it's defined in the iApp and strict means it has to be the same as the template (iApp). To edit it, you'd have to edit the template and re-deploy. Or disable strict updates and then you can edit the created objects as you like.

     

    H