For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_G__33241's avatar
David_G__33241
Icon for Nimbostratus rankNimbostratus
Mar 21, 2014

VS requirements for sideband connection

As part of an Access Policy, I want to make a sideband connection to a McAfee ePO server to see if the McAfee Agent GUID retrieved from the registry is in fact registered as a corporate device. The ...
BIG-IP Access Policy Manager (APM)
design
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 24, 2014

Since the call is HTTPS, the iRule indicates that a helper virtual server is required for TLS

 

To add onto Jason's comment, you'd basically create an HTTP virtual server with an internal, non-routable listening address (so that it's not accessible to clients). That virtual would have a pool that pointed to your remote HTTPS resource, and then you'd apply a server SSL profile. Your sideband iRule would then reference this virtual server by name (the SB_virt variable in this case). Your iRule will make a sideband call to the HTTP virtual server (by name), which will send the traffic to the remote HTTPS server(s) in its pool.

 

The SB_uri variable should just be the URI portion on the request, so in this case just "/remote/system.find?searchText=38EDE1D1-E565-44DD-9E36-EE089FF9F85E".