For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

vandenhoutenp_9's avatar
vandenhoutenp_9
Icon for Nimbostratus rankNimbostratus
Apr 17, 2014

StoneWall service/component and Integrated IP filtering engine

Hi all,

 

A bit of a simple question (I hope) but what exactly is the StoneWall service bundled in with the F5 Edge Client (Win) and what does it have to do with the Integrated IP filtering option in the network access profile?

 

There are a couple of issues we're having relating to this component:

 

  1. When we install the Edge Client from the MSI we have to deselect the StoneWall service otherwise the installation fails with a reference to the StoneWall service installation files not being found.

     

  2. We've enabled the Integrated IP Filtering option because although we were forcing all traffic via the VPN tunnel this didn't always have the desired effect and users were able to navigate to local NAS drives whilst connected to the VPN. Since enabling that option users get a UAC prompt when launching the client.

     

Any help would be greatly appreciated!

 

Thanks

 

Peter

 

BIG-IP Access Policy Manager (APM)
deployment
design
security

2 Replies

  • vandenhoutenp_9's avatar
    vandenhoutenp_9
    Icon for Nimbostratus rankNimbostratus
    May 16, 2014

    Hi all,

     

    Just in case anyone is interested in an answer for this one, the StoneWall service is specifically linked to "Always Connected" mode. With "Always Connected" mode in operation the StoneWall service serves as a firewall only permitting pre-VPN traffic to the VPN connection address.

     

    Thanks

     

    Pete