Forum Discussion
Nfordhk_66801
Nimbostratus
Feb 19, 2015Using APM to secure VS by machine name
Hi,
We are attempting to meet compliance standards and determine a way to secure access to our Virtual Servers. Short of ACLs due to our IP design based on geographic rather than departments in ...
Nfordhk_66801
Nimbostratus
Feb 25, 2015Those numbers don't increment at all. I even copied and paste the name. I added the logging
when RULE_INIT {
set static::THIS_DOMAIN ".insertdomain.com"
log local0.
}
when ACCESS_POLICY_AGENT_EVENT {
if { [ACCESS::policy agent_id] eq "get_computer_name" } {
log local0.
set computer [string tolower [ACCESS::session data get "session.windows_info_os.last.computer"]]
foreach x [split $computer "|"] {
if { $x ends_with $static::THIS_DOMAIN } {
set machinename [lindex [split $x "."] 0]
ACCESS::session data set session.custom.computer $machinename
return
}
}
}
}
I think this is all it gave:
Feb 25 14:13:33 nho-bigip-test info tmm[14917]: 01220002:6: Rule /Common/get_computer_name : local0.
Feb 25 14:13:33 nho-bigip-test info tmm1[14917]: 01220002:6: Rule /Common/get_computer_name : local0.
Seth_Cooper
Employee
Feb 25, 2015Please update the log statements to help determine where the iRule is getting to...
log local0. “ACCESS_POLICY_AGENT_EVENT before if”
log local0. “ACCESS_POLICY_AGENT_EVENT after if”
Place these at different places to see what is getting fired and what isn't getting fired.
Just to confirm... you did add the iRule to the Virtual Server that the APM policy is tied to?
Seth
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
