Forum Discussion

Martin_Vlasko's avatar
Martin_Vlasko
Icon for Altocumulus rankAltocumulus
Aug 14, 2014

Portal Access Security Problem - Manipulation with HEX string in URL mangle allows access to any internal website!! How to restrict?

Hi, We are running simple Portal Access policy on our APM, which provides authenticated external users an access to our public web site located behind the APM, basically a simple reverse proxy with...
BIG-IP Access Policy Manager (APM)
deployment
portal access
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Aug 20, 2014

yep ACLs are the way to go, i still feel F5 should make this more clear in the documentation and make APM a default deny device like the LTM behaves. a standard deny all ACL in the end would accomplish this.