Forum Discussion

Colin_Bowern_15's avatar
Colin_Bowern_15
Icon for Nimbostratus rankNimbostratus
Apr 24, 2014

Publishing Team Foundation Server over SSL VPN

I'm working with a client who is using an F5 FirePass SSL VPN. They are trying to publish Team Foundation Server over the SSL VPN for remote access through Visual Studio. It seems like something an application tunnel should be able to do. Is there any guidance on publishing web services such as TFS through the SSL VPN that can be accessed by desktop applications (in this case Visual Studio)?

 

BIG-IP Access Policy Manager (APM)
deployment
firepass
microsoft
security
  • jko5F5_151503's avatar
    jko5F5_151503
    Icon for Nimbostratus rankNimbostratus
    May 15, 2014

    I just went through this same situation. I don't know if I did it the most efficient way but I used both Portal Access and Network Access.

     

    For the Portal Access, I created the PAL using Application URI that looked like http://x.x.x.x:port

     

    I did not add any resource items. Next I added the PAL to the visual policy editor under portal access. Assuming your TFS permissions are good, next time you log into the webtop you will see the PAL for TFS.

     

    Next for the clients to us Visual Studio from their local machine, select the Access Policy that that you just edited and under the visual policy editor under network access, add the Access Policy.

     

    Mine is configured as a split tunnel. On the webtop the user will then click the Access Policy you published on the webtop. This will launch a network tunnel. (You should see it come up). Make sure your routing is correct. Then when the client launches VS from the local machine, it will be able to connect to the TFS server that is on the LAN.

     

    I would be interested in knowing if you were able to get this to work a different way.