For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Kolb_27656's avatar
Eric_Kolb_27656
Icon for Nimbostratus rankNimbostratus
Apr 03, 2012

Protecting an HTTP AAA with SSL

We've got an HTTP\Basic AAA server and I'm having some trouble getting it off the ground in an access profile. Since the APM doesn't support setting up that AAA server pointed at an HTTPS source, we n...
app sec
BIG-IP Access Policy Manager (APM)
security
Eric_Kolb_27656's avatar
Eric_Kolb_27656
Icon for Nimbostratus rankNimbostratus
Apr 03, 2012
I've tried changing it from an HTTP\Basic page to one responding to POST data. When the AAA is pointed directly at it, it works fine. When it's being redirected through an iRule, it does not respond appropriately to 301, 302, or 307 status codes. When the target URI is a POST site, it doesn't seem to repost the form to the location specified in the status code. This is true whether the target URI is HTTP or HTTPS.

 

 

What am I missing here, or is the HTTP AAA support just broken?