APM Policy with Restrict to single client IP
I am using an APM policy for RDP connection authentication. Currently, there is no pool associated with the VIP, and the client-server connection is defined within the access policy. For users connecting from an ISP, the IP address keeps changing, which causes their connections to be terminated, as shown by the error below. In the access policy, there is an option called "Restrict to single client IP". When we disable this option, the connection works, but this feature is crucial for protection against Session Hijacking. Have any of you encountered a similar scenario? Or do you have any suggestions on how persistence could be achieved without compromising security, perhaps using an iRule or other solutions?
Using two certificates with SNI and IP as common name
Hi all, I have a VS which client access using both FQDN and IP and I need it to be HTTPS. I have a legitimate cert for the FQDN (wildcard) and I've created a certificate for the IP address using a CA we have inhouse. I've also included SAN values for DNS and IP in this cert. When I attach each certificate individualy to the VS and try to access it accordingly, everything works fine, so I know the certs are legit. When I put both certs in the VS and configure their SSL profile with Default SNI and ServerName, it also selects the FQDN cert, even if the client access using IP address. Any suggestions why this happens? Using version 14.1.4.5. Thanks!Remove 2nd IP address from packet header
Hi, I need help creating an iRule, that looks at a packet header, and if the header has a 2nd IP address, remove the 2nd address, if it doesn't, then pass through as normal eg header below Example: 2019-03-21 [https 10.10.10.10, 10.11.11.11] INFO Any help would be appreciatedHow to input IP address in LTM Policy Simultaneously??
Good Afternoon Bro,Sist ! I want to input IP address in LTM Policy like this Pics below !! I have 100 IP address and I wouldn't input that IP one by one because its Wasting time. Any Idea all? How I can input that 100 IP address simultaneously ??
Blocking multiple IPs with iRules
Hi, I am trying to block multiple IP's with iRules but unable to do so. Currently using the below command, but everytime there is a new ip, I need to create an iRule for that & bind it to the virtual server. when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals 1.1.1.1/32] } { log local0. "Blocking [IP::client_addr]" reject } } Is there a way to create a group where all IP addresses can be added & automatically blocked? or what is the best way of doing so? probably a nested If statement. Thanks for the help. Chadi
