Forum Discussion

Alexander_01_13's avatar
Alexander_01_13
Icon for Nimbostratus rankNimbostratus
Jan 10, 2014

Security issue using two different authentication methods with the same ntlm domain (SSO)

Hello fellows,   I have run across a security issue with two web servers using the same ntlm domain for authentication (APM) on our F5 BIGIP Version 11.4.1.   ServerA contains critical informat...
BIG-IP Access Policy Manager (APM)
deployment
microsoft
security
Alexander_01_13's avatar
Alexander_01_13
Icon for Nimbostratus rankNimbostratus
Mar 06, 2014

So, getting physical... I would need some help setting up an irule, as I am a miserable programmer...

The steps of the script would be:

  1. detect that there is a request from an existing session
  2. verify that 
    session.securid.last.state
    has the value 
    SECURID_AUTH_STATE_ACCESS_ACCEPTED
    .
  3. if yes: let it pass on
  4. if no: redirect to apm logon page

This irule would be attached to the virtual server with the securid requirement.

Anybody a draft for a script that I can start from? O:-)

Regards, Alexander