For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jdewing's avatar
jdewing
Icon for Cirrus rankCirrus
Sep 14, 2018

Using Clientless Mode with smartcard

I have a VIP configured with an APM policy for smartcard authentication. Users can authenticate using their smartcard with no issue, however they also want to use a software called TortoiseSVN to u...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Sep 28, 2018

Hi,

 

Clientless mode is made to bypass interactive actions. In your scenario, APM policy is not mandatory. You can simply use Client Certificate Authentication on the clientssl profile.

 

Anyway, On-demand Cert Auth will not work in clientless mode. Desktop client and browser doesn't share sessions (cookies) so you have no change to share sessions between software.

 

You can instead use the Browser to authenticate the user. And an irule to then identify that the Client IP already authenticated.

 

Regards

 

Yann