Forum Discussion
Shehryar_84142
Nimbostratus
NimbostratusSSL for Portal Logon
user <---> F5 <---> SAP Portal
Hi,
We have a requirement that if the user tries to access the SAP Portal over HTTP without authenticating, the Portal logon page should be sent back...
Hi Shehryar, that's a pretty straightforward iRule. You can check for the presence of the authentication cookie and if it'a not there, redirct the user to HTTPS, and specifically the login page. You may have to also detect the login page and revert the user back to HTTP.
The other option would be to use BIG-IP APM module. With APM, protecting authentication with SSL becomes far more trivial and wouldn't require any iRule.