cancel
Showing results for 
Search instead for 
Did you mean: 

Help with F5 SWG and APM (Web Proxy function)

Sunny_s
Nimbostratus
Nimbostratus

Hi All

 

I need your help on deploying F5 BIG IP with SWG (Secure Web Gateway) and APM (Access Policy Manager) (i.e. Web Proxy) functionality using forward proxy feature.

 

Can you please let me know how do I go about doing this?

 

 

Thanks in advance

 

Sunny_s

6 REPLIES 6

Dave_W
F5 Employee
F5 Employee

Sunny_s
Nimbostratus
Nimbostratus

Thanks for the update Dave.

 

I have tried to use the guide to deploy F5 BIG-IP as a explicit Forward Web Proxy using the Secure Web Gateway (SWG) but it does not seem to work on my test lab.

 

Is it possible to skip section of AAA (Create an Active Directory AAA) section and rather do authentication based on the source subnet?

 

 

Will appreciate help from all the Pros

Dave_W
F5 Employee
F5 Employee

Hello, I am not sure about that, i suppose you could try and test it. It sounds like more you want to use a Transparent Proxy.

Sunny_s
Nimbostratus
Nimbostratus

Thanks for the update Dave, really appreciate your reply on this.

 

I have checked the deployment guide and it says that you can allow connection based on the Source IP subnets on APM rather than through AAA (AD servers), but I don't know how to achieve this. 😰

 

 

Can anyone please help with SWG and APM deployment on F5 based on IP subnets rather than using AAA (Active Directory servers) for authentication?

 

Thanks in advance.

The_Y
Cirrus
Cirrus

I believe you should be able to use an ACL assignment to accomplish what you are looking for

Sunny_s
Nimbostratus
Nimbostratus

Hi

 

Reaching out to all pros

 

I need help with deploying F5 using F5 APMthe /SWG (using this article - https://devcentral.f5.com/s/articles/configuring-the-f5-big-ip-as-an-explicit-forward-web-proxy-usin...).

 

Using show and tell, I have already tried but the solution isn't working the, I will compensate you for your time/efforts. (can you pls contact me on Pushkin.Sawhney@gmail.com).

 

Thanks