Forum Discussion
Dear Matthieu ;
Thank you for this iApps devellopement. I have few questions for you
1- On IOS-10, it seems the iApps is not able to retrieve mobile variables content - The APM receives this message from the mobile client : “session.client.platform is unknown”. Could someone at F5 update the iApps in order to support IOS10 and Windows 10
2- It is mandatory to use the F5 Edge Client app (from AppStore) on the mobile in order to help the APM to retreive variable content ? if yes, over all plateforms ?
3- Are you aware about other prerequisites ?
Thank you very much Matthieu. Have a good day.
- Jonathan_WingfiSep 28, 2016Altostratus
I ran into the iOS10 issue, and the fix is pretty simple. Modify the f5_mobileiron_vpn_mobileiron_apm_support irule and look for this section:
switch -glob [ACCESS::session data get "session.client.platform_version"] { "7.*" - "8.*" - "9.*"{
Change it to: switch -glob [ACCESS::session data get "session.client.platform_version"] { "7." - "8." - "9." - "10."{ Keep the asterisks after the period. The post keeps removing them for some reason.
From my understanding it is necessary for the Edge client to retrieve the UUID. For other platforms you should only need the client components, but it is highly recommended to use the Edge client to avoid potential issues with Chrome and Firefox. Hope this helps.
- LB_Admin_133366Oct 19, 2016Nimbostratus
Hi,
We download the iapp template for mobileiron api v2 from above link. we created the iAPP using the temaplate and it created successfuly.
then followed the steps to attach the irules and Access policy to include the irule events.
Now when we access the VIP which ha sthe access policy, the polciy kick start at the irule event for pull details with irule even id "mi_device_details" we get TCL error.
TCL error: /Common/mdmprd.app/mdmprd_mobileiron_apm_support - can't read "static::mdmprd_mi_virtual_name": no such variable while executing "connect -timeout 1500 -idle 30 -status conn_status $static::mdmprd_mi_virtual_name" ("mi_device_details" arm line 6) invoked from within "switch [ACCESS::policy agent_id] { "mi_device_details" { Call 1 to retrieve UUID - unique ID from MobileIron
Do you have any idea why i am running into this issue.
Thank you.
- Matt_DierickOct 25, 2016Employee
Hi,
Did you downloaded the latest one on : https://github.com/MattDierick/MobileIron-iApp
I updated the code for iOS 10.x support.
And which release on BIGIP are you testing on ?
- J_SmellowOct 25, 2016Employee
ODC WebAdmin identified the TCL error was due to the end customer having a non-standard character in their password field ($). Changing the password resolved the issue.
- The-messengerFeb 25, 2017Cirrostratus
I've been looking at the possibility of checking Airwatch for device management with APM. I have not seen the question answered about the edge client. Is the edge client required - I don't want to do vpn, just activesync and I can't push the edge client to devices.
- Matt_DierickFeb 26, 2017Employee
To make AirWatch or MobileIron device posture check, you have to present UUID toward MDM. To do so, only EDGE client can retrieve this information (neither Apps or Mail clients retrieve UUID). If you don't want to use Edge client, you need to provide this UUID to APM. The solution is Client Cert authentication where UUID is filled in a custom field in the certificate.
- The-messengerFeb 27, 2017Cirrostratus
Thanks Matthieu,
Can you point me to help or docs on configuring the cert with Airwatch? I'm not concerned about getting device compliance, I'll let Airwatch handle that, I just want to verify that the MDM profile is on the device so I know Airwatch is managing it. Would it be any easier to just verify the MDM profile is on the device?
- Matt_DierickFeb 27, 2017Employee
You do not check if the profile is on the device but if the device is enrolled and/or compliant. It is almost the same.
For client cert, I never did it via AirWatch. I did it manually. But in AirWatch to can push a profile with the client certificate. Airwatch will get the certificate from the PKI.
- AndreaApr 20, 2017Nimbostratus
is it possible to use this iapp without installing the edge client on the mobile device.