For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Robert_Early_71's avatar
Robert_Early_71
Icon for Nimbostratus rankNimbostratus
Jan 20, 2015

Transparent Authentication for Network Access VPN in APM

Hi, We are trying to implement transparent authentication access to a Network Access resource in APM using client certificates and Kerberos. The tech articles I have found cover how to implement thi...
BIG-IP Access Policy Manager (APM)
deployment
kerberos
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jan 20, 2015

the line you quote comes from an article about kerberos SSO, something which im not sure you need to do with network access. as you can see it often relates to portal access where your client isn't able to do SSO itself, but the APM has to do it for the client.

 

with a VPN your client can do much more, as it has "full" network access, you might not have to do SSO.

 

so are you sure you need to do kerberos SSO or just want to do kerberos on the outside to authenticate against the APM?