Forum Discussion

kimhenriksen's avatar
kimhenriksen
Icon for Cirrostratus rankCirrostratus
Feb 03, 2021
Solved

Getting basic auth prompt before apm logon page event

Hi   I´ve setup a basic login policy. Check if client subnet is RFC1918, if yes do ntlm auth, if not go to logon page and do MFA login.   But.. when i access the VIP external i get a basic a...
  • kimhenriksen's avatar
    Feb 17, 2021

    A quick update.

    Latest rule is not correct, pasted the wrong one from the clipboard.

     

    Here the latest.

    when HTTP_REQUEST { 

     if { [IP::addr [IP::client_addr] equals "10.0.0.0/8"] or [IP::addr [IP::client_addr] equals "192.168.0.0/16"] or [IP::addr [IP::client_addr] equals "172.16.0.0/12"] } { 

      if { [ACCESS::session data get session.ntlm.last.result] eq 1 } {

        ECA::disable

      } else {

      ECA::enable

      ECA::select select_ntlm:/Common/ntlm_profile

      #log local0. "eca enabled"

     }

     } else {

      ECA::disable

      #log local0. "RFC1918 ECA disable"

     }

    }