Vulnerability dashboard
Hello Folks, I have a suggestion for creating a vulnerability dashboard in devCentral It will be good, in Devcentral we can find latest CVE IDs that affecting F5 and suggested fixes . As of now, attacks are very high and if we are able to check latest vulnerabilities and F5 suggestion in this community, it will be very much helpfull. As of now i have to wait for my scanning devices reports to check CVEs in F5 KBs. If there is a path in devCentral for the same, it will be very helpfull. Also we are seeing so many vulnerability related queries in technical forum, for them aswell it will helpful Br Aswin
APM - Capture Login sharepoint
Hello everyone, I need some help. I'm not very good with APM, but my question is: --- I have an application published in APM, and all accesses are OK. However, I received a request to publish the application in sharepoint (hyperlink). However, when placing the application hyperlink in sharepoint, the application is opening the long page (APM) and requesting login again. My challenge is: Collect the user logged into sharepoint and use it to perform SSO in my application, without the need to go through the Logon Page NOTE: Today, my Sharepoint and F5 APM is integrated with Active Directory (not Azure AD). Is it possible with APM to collect the user logged in to Sharepoint and perform SSO in the APP? Regards PauloFeature Request: Big IP Client Disconnect and Retry Login, Instead of Showing Timeout Error Msg
Fromjohn-nelson's post, copied here for better visibility: "When using the BIG-IP Edge client, it frequently (most every day) shows the error "ERR clog1049 - Your MFA login page has timed out. Please disconnect and then try again". Someone told me that this error message is coming from some security module, that this is not in the BIG-IP client, itself. If the BIG-IP client has a way to recognize this type of error (i.e. any error that basically says "you need to disconnect and retry"), that would make it a bit easier to implement. I would like to request a feature to handle this scenario. I'm not sure of the exact way to implement it. But here is one idea. When the user is actively logging in, and the BIG-IP client encounters any error, it would apply a list of "rules" (maybe it looks at errors and matches each 'rule' using a Regular Expression in the rule). Those rules could be entered by the user, or by the VPN admin team. So a "rule" could be entered that says, when the user is actively logging in, and the BIG-IP client sees this specific error message, then the "rule" tells the client to disconnect, wait N seconds (e.g. 3 seconds), then retry the login. Naturally, this could support other actions, as well. Thank you."
