For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aviv's avatar
Aviv
Icon for Cirrus rankCirrus
Nov 23, 2015

Rdp that ask the user for ip or host name as resource

Hi everyone! I have an apm policy that publish rdp based on AD Group Resource Assign. i need to add an option ,on the same virtual server and access policy ,to let the user that successfully logged on, to write an hostname or ip address of a remote computer and then open rdp to that object.

 

How do i add this option parallely?

 

Thanks,

 

4 Replies

  • Hi Aviv,

     

    Interesting use case. You can do it from the logon page or any other agent (box) with a field.

     

    On logon page, add a new field (field 3 for i.e) called "IP_RDP" --> this will create a session variable session.logon.last.IP_RDP Then create and assign an RDP ressource with %{session.logon.last.IP_RDP} as IP address.

     

    You can create 2 logon page. First with credential, second only with RDP IP field.

     

    Hope this help Matt

     

  • No big deal, use a branch for that with an expression after AD Query

    Logon page --> AD auth --> AD Query (2 branches based on AD query results)

    --> Branch 1 if option needed --> logon page with one IP_RDP field --> resources (with %{babla})
    --> Branch 2 if option not needed --> resources (without %{blabla})
    

    Make sense ?

  • Hi ! i need some help please. i have attached my current vpe as image . can you explain or edit the image as you think it should be if i want to achieve this goal 1.rdp icon to predefined computer 2.rdp to computer that his ip address was written in a logon page by user Thanks, Aviv

     

  • Difficult through DevCentral.

     

    1. Modify AD Query box.

       

      • Create a branch with an expression to check User Group. As you can see, in the branch you can choose in the AD Query expression the memberOf expression. Fill it accordingly.
      • You should see 3 branches. From top to bottom : AD Group, QuerySuccess, fallback
    2. On the new branch AD Group, add a logon page with only one field for the IP.

       

    3. Assign the ressource.