For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kristian_Petter's avatar
Kristian_Petter
Icon for Nimbostratus rankNimbostratus
Apr 04, 2017

VPN solution where local administrator is not required.

I'm looking for a VPN solution that does not require user / client is local admin. This is intended for example for consultants at a client who is not a local administrator on their computers.

 

I wonder if this works, if one avoids setting up a Layer 3 VPN Tunnel with eg F5 APM?

 

My thought is to set up a portal where I publish RDP links to the terminal servers that the consultants should have access to. I hope I can use one two factor solution with F5, where the customer has a proprietary SMS solution.

 

Do you know any guidance on how to implement this?

 

I am grateful for every answer.

 

application delivery
BIG-IP Access Policy Manager (APM)
LTM
security

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Apr 04, 2017

    Hi,

     

    with F5 APM, you can use 2 different solutions:

     

    • Remote desktop resource within a "Full Webtop". it will display a portal with all assigned resources (Internal web sites, RDP resources, Citrix resources, ...)

    • Remote desktop gateway to access RDP servers directly with MSTSC client

       

      mstsc client --HTTPS--> F5 APM as RDP Gateway --RDP--> Internal server

       

    Full webtop can use multiple authentication protocols.

     

    Remote desktop gateway only support NTLM authentication