Remove the Select Client popup from VMware Horizon iApp
Due to security controls, we must have all users use web based HTML (BLAST) access to VDI sessions. The iApp works great, except when you launch a desktop it show a popup to requesting the user select a client (either VMware Horizon or HTML5 Client). I have gone though the iApp template () and cannot find any reference to the popup. I have looked through the APM policy, session-policy and Webtops to see if it there, but I can't seem to find it. Any ideas how to disable this popup?
iRule to Change HTML "Name" Attribute in VPE
I am attempting to have an iRule that will change the HTML while in the VPE. We have an application that uses SAML and is looking for the "name" attribute to be "user," but our SAML IdP's name attribute is "username." This is important because the application allows credential caching, but it is hard coded to only allow caching for that specific value. I've been reading up on the STREAM expression to do this, but can't seem to figure out how to have the F5 do it since it is redirecting to the IdP. We were able to do this with IIS, but would rather have the F5 handle it. The other thought was to create a custom login screen on the F5 that would have the name attribute set correctly, but I can't figure out how to post to our ADFS SAML IdP. Update: I've been looking into the STREAM expressions, but apparently those have a bug when being used by APM as described in https://support.f5.com/csp/article/K12558. It doesn't appear that we have LTM installed on the same machine as APM because we don't have the option for "Host" in the destination box. When I log into the local (non-DMZ) LTM, it does have that option available. I've also tried using HTML_TAG_MATCHED, but it appears to only trigger the iRule AFTER the submit button is clicked on the form. From the documentation, it doesn't sound like that should be the way it happens - the example shows replacing jpg images with png, so it would need to happen on page load unless I am misunderstanding it. https://devcentral.f5.com/wiki/iRules.HTML-tag-attribute.ashx https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-concepts-11-4-0/9.html Thanks!Wss traffic not going through when html profile in use
Hi Team Hope everyone is doing well. I have a setup of F5 asm n f5 ltm and application uses wss protocol after initial login. I am using html profile n stream profile to manipulate the html contents of html page. And when using ltm alone with just wss profile and asm, everything is working but when I add the html profile where I have chose to remove some of the tags and stream to replace some of the strings, but we do want to apply asm on the wss content as well, so dnt want to remove http profile when wss upgrade header is seen. And I did try applying html profile to the login page alone by fetching the uri from request and checking it in response but for some reason, after login where wss protocol upgrade takes place, the application doesn't work.html response ASM include image
Hello I need block my web site with ASM, but I need load the custom response page but the images not function, I want know if I can load image with Ifile in the text HTML. or other posibility for this. Security ›› Application Security : Blocking : Response Pages in version 11.6Wildcards within the "Match Attribute Value" field for creating new raise event on tag rule
Hi, I would like to rewrite "src" attributes inside img-tags. The point is, that there are some links pointing to an inaccessible domain name. The idea is to replace for ex. "http://abc.com/image.jpg" with "http://def.com/image.jpg". That's why I would like to add a wildcard like "http://abc.com/*" to the "Match Attribute Value" field inside the "Create New Raise Event on Tag Rule" form, to include all directories. Is that possible? Thanks in advance, best regards
