Portal Access Application URI - ERR_EMPTY_RESPONSE

Hello KevinA​, 

Thanks for posting to our community. I would like to encourage you to update your post and if your questions have been answered please mark your post as solved. This will help you and others in the future who may encounter this same experience. 

-Melissa 

You could override X-Frame-Options or even Content-Security-Policy with an irule like this

when HTTP_REQUEST 
{
    switch [HTTP::host]
    {
        "portal.example.com"
        {
            switch -glob [HTTP::path]
            {
                "/f5-w-<YOUR_APP_HEX>$$/*"
                {
                    set iframe_allow
                }
            }
        }
        default
        {
            drop
        }
    }
}

when HTTP_RESPONSE_RELEASE
{
    if {[info exists iframe_allow])}
    {
		if {([HTTP::header exists "X-Frame-Options"])}
		{
			HTTP::header remove "X-Frame-Options"
		}
		if {([HTTP::header exists "Content-Security-Policy"])}
		{
			set csp [HTTP::header "Content-Security-Policy"]
			append csp " frame-src https://your_target_url;"
			HTTP::header replace "Content-Security-Policy" $csp
		}
}

Thanks Tofunmi.

What you’re running into isn’t an F5 misconfig; it’s a browser security policy. Portal Access works by rendering the target app inside a frame. The error you saw in DevTools – X-Frame-Options: DENY – instructs the browser not to render the page in a frame. That header is being honoured, so the browser drops the response, and you end up with ERR_EMPTY_RESPONSE.

Unfortunately, Portal Access cannot override this. Even if you try to strip the header in a Portal Access profile, most modern apps also set Content-Security-Policy: frame-ancestors, which will block framing.

• Contact the app owners to update the headers (X-Frame-Options: SAMEORIGIN or allow specific frame-ancestors in CSP to include your F5/Portal domain).
• If you don’t control the site, Portal Access isn’t viable — use Network Access (VPN) or App Tunnel so the app can be reached directly without being framed.