For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shehryar_84142's avatar
Shehryar_84142
Icon for Nimbostratus rankNimbostratus
Apr 05, 2011

SSL for Portal Logon

user <---> F5 <---> SAP Portal     Hi,     We have a requirement that if the user tries to access the SAP Portal over HTTP without authenticating, the Portal logon page should be sent back...
partner
sap
Nojan_Moshiri_4's avatar
Nojan_Moshiri_4
Historic F5 Account
Apr 05, 2011
Hi Shehryar, that's a pretty straightforward iRule. You can check for the presence of the authentication cookie and if it'a not there, redirct the user to HTTPS, and specifically the login page. You may have to also detect the login page and revert the user back to HTTP.

 

 

The other option would be to use BIG-IP APM module. With APM, protecting authentication with SSL becomes far more trivial and wouldn't require any iRule.