F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

How to set your first SWG Per-Request Policy with 11.6 release

Hi, Please find below an how-to explaining how to set your first SWG Policy on 11.6 release with the latest feature "Per-Request Policy". In this scenario, I control on each request if the webs...
Published Jan 06, 2015
Version 1.0
BIG-IP Access Policy Manager (APM)
france
paris users
security
Matt_Dierick's avatar
Icon for Employee rankEmployee
Security Solution Architect for F5 Networks since 2012. Focusing on Application Access and API Security. You can find more how-to on my YouTube channel : https://goo.gl/eErp51
View Profile
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Feb 27, 2018

Hey Matthieu, thanks for a great video! This made the setup look so much easier than going through the entire SWG documentation.

 

I just got a few follow-up question, since the iApp is configuring the virtual servers, where does the SWG state which of these virtual servers that should be used? Is it defined in the Per-Request Policy depending on which Allow statement you reach? For instance, if you follow the HTTPS branch you will hit the HTTPS VS and if you follow the HTTP branch you hit the HTTP VS?

 

The reason I'm asking is that I'm currently assisting with troubleshooting a SWG setup and with limited experience working with the product, I have tried to understand the flow by reviewing the configuration in iHealth and I have not found any "proof" as to where this is defined in the configuration.

 

My guess is that it happens under the hood of the SWG based on the Per-Request Policy.

 

Also, does SWG support other protocols other than HTTP/HTTPS?