For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ward_Delcomyn_9's avatar
Ward_Delcomyn_9
Icon for Nimbostratus rankNimbostratus
Feb 15, 2016

Per-App-VPN using Kerberos Constrained Delegation and Protocol Transition...HELP!

First a picture of what I'm trying to do:   Now for a brief description: We are trying to implement per-app-vpn (AIRWATCH). We stood up a "VPN only" BigIp appliance "VPN1" that hosts the vpn ...
application delivery
BIG-IP Access Policy Manager (APM)
security
Josiah_39459's avatar
Josiah_39459
Historic F5 Account
Feb 16, 2016
Kerberos Constrained Delegation won't work without the client getting its own ticket. But if per-app vpn authenticating client certificate is working, and the client certificate has the kerberos username, you should be able to do kerberos sso with it