APM Cookbook: On-Demand VPN for iOS Devices

Overview I’ve been using On-Demand VPN for a number of years as it’s a secure and easy way to access applications while on the road with the added benefit of conserving device battery life when id...
Published Jul 25, 2014
Version 1.0
BIG-IP Access Policy Manager (APM)
cookbook
ios
Security
vpn
Smithy's avatar
Smithy
Icon for Cirrostratus rankCirrostratus
Oct 21, 2018

Hi Johan,

 

If you are following the above example and the username extracted from the certificate is UPN format, add an AD Query object to the VPE and set the "SearchFilter" to "userPrincipalName=%{session.logon.last.upn}".

 

Then create branch rules based on the AD group membership returned or use a "AD Group Resource Assign" or "Advanced Resource Assign". Multiple options available.

 

Cheers,

 

Brett