For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Clint_16698's avatar
Clint_16698
Icon for Nimbostratus rankNimbostratus
Apr 16, 2008

Using Session variables to control Split Tunneling

Hello I am new here, obviously, and I am also new to F5's products. I just started a job a couple months ago that implements GTM, LTM, and Application Delivery via Firepass.     I have a problem...
BIG-IP Access Policy Manager (APM)
remote access
security
Mike_61719's avatar
Mike_61719
Icon for Cirrus rankCirrus
Apr 21, 2008
You can create two separate resource groups on firepass to help facilitate. Another option is to use AD groups to separate it out.

 

 

Let me explain:

 

 

Certain users come in under the 192.168.1.1 IP address, you can either designate that IP address as a protected configuration and then protected resource group.

 

 

You can also select an AD group that is given to those who require split tunneling that point to the separate network access resource.

 

 

Multiple ways of doing thigs on the firepass, I can think of three or four more.