Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Deploy APM per-request policy and Application Traffic Insight(former Device ID+)

Kenji_Omori
Nimbostratus
Nimbostratus

Hi F5 Community,

 

I tried to deploy Application Traffic Insight to APM Zero Trust environment using the JavaScript Tag. But I couldn't find "login.inc" file in per-request policy customization screen on GUI.

 

<Question>

Is there any JavaScript Tag insert method in per-request policy?

 

<Test environment>

-BIG-IP : v16.1.1

-Module : only APM

-Application Traffic Insight deployment method: JavaScript Tag

-Zero Trust config name: IAP-single-proxy

 

<Test procedure>

1. Deploy a Zero Trust configuration using Guided Configuration

0691T00000F8mTbQAJ.jpg 

2.modify "logon.inc" page in per-request policy to add JavaScript Tag

0691T00000F8mTvQAJ.jpg 

0691T00000F8mTwQAJ.jpg 

 

But, I couldn't find "logon.inc" page in per-request policices customization menu and APM local directory.

# find / -name 'logon.inc' /var/sam/www/client/customization-source/Common/standard/logon/default_logon/de/logon.inc /var/sam/www/client/customization-source/Common/standard/logon/default_logon/zh-tw/logon.inc --- snip --- /opt/.sdm/var/config/rest/iapps/f5-iappslx-access-exchange/nodejs/logon.inc

 

I found out "logon.inc" in "per-SESSION policy" and I could insert a JavaScript Tag and get a correct test result.

 

0691T00000F8mUUQAZ.jpg 

 

Thanks,

Kenji Omori

1 REPLY 1

You to instert the javascript for Shape bot security on the APM?

 

Also from what I read the per request policy should use the same logon page. When you customize the logon page and test triggering it with per request policy do you see difference in the two logon pages. If you see then maybe the F5 TAC is needed.

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-access-policy-manager-visual-policy-editor/access-...

 

https://www.f5.com/es_es/products/security/application-traffic-insight