For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sameh_atef_2110's avatar
sameh_atef_2110
Icon for Cirrus rankCirrus
Nov 15, 2015

Queries about access to APM resources

Hi, I have two queries :   If i authenticate from APM logon page. Then, i get a certain webtop. I will connect to webtop resources like links, RDP ....etc using which source IP ? the user IP or...
BIG-IP Access Policy Manager (APM)
security
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Nov 15, 2015

There isn't really a short answer. Apart from it depends on the IP address the client get back from a DNS query for the APM server address.

 

I went through this quite a bit last year after some clients started to complain that they could no longer access the web top after they'd started the network access up. And it turns out it's reasonably straight forward in concept. But highly dependent on how you have everything (Including DNS) setup.

 

If the IP address is routable via the network access tunnel. You'll access the web top using whatever IP you're NAT'ed to (Including SNAT). If the IP address the client gets back from a DNS query is NOT routable via the tunnel then they'll access the webtop directly (In parallel and external) to the tunnel. SO the web top would see their access from the same IP address as before they started the network access.

 

H