For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rupesh_M's avatar
Rupesh_M
Icon for Nimbostratus rankNimbostratus
Jul 28, 2014

VPN--SSO not working for on mobile devices if SSL offloading is enabled on VIP

We have F5 4000 appliance , configured with two partitions and route domain.One is used for VPN and another for Load balancing.

 

Configuration

 

Load Balancer - We are doing load balancing for one WEB APP-1 and VIP is configured.

 

VPN - SSO is configured for APP-1 with one layered VIP.

 

Issue

 

If we are not doing SSL offloading on load balancer, SSO for APP-1 works fine through VPN on mobile , laptops. But if we enable SSL offloading on load balancer SSO does not work on mobile device (It works on laptops).

 

Query

 

How SSO can be achieve on mobile devices for APP-1 through VPN if SSL offloading is enabled on loadbalancer ?

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iApps
iRules
security

1 Reply

  • Arnaud_Lemaire's avatar
    Arnaud_Lemaire
    Icon for Employee rankEmployee
    Jul 28, 2014

    Hello Rupesh,

     

    you may need to use and irule in order identifying direct users from vpnssl ones. you have a example here for ssl profile :https://devcentral.f5.com/wiki/iRules.SSL__disable.ashx