[AV Check] How to disable checking if Windows Defender is up-to-date during client-side check
Hello DevCentral users, I am currently trying to figure out how to avoid running into issues when one of my users has eSet Endpoint Security installed on their Windows 10 devices. When a user installs eSet Endpoint Security it automatically disables the built-in Windows Defender. This disabled Windows Defender however is being found by the antivirus client-side check in my Access Policy. The user is then not able to log into my SSL-VPN. I would like to know how to built an antivirus client-side check into my Access Policy where it doesn't matter which AV product a user has as long as its virus definitions have been updated at least 7 days ago, like this: I've added Windows Defender as a second AV but when I do get it to work (no check on if the definitions are up-to-date) it won't suffice for users who only have Windows Defender installed. Does anyone have any tips or tricks on how to set this up? Thanks in advance!
F5 APM: Traffic between two ssl vpn clients
Hello, is there a way to drop traffic between two ssl vpn users? right now when 2 or more users are connected, there is nothing to prevent them from sharing files or communicating with each other... we would like to create sort of "private vlan" or isolation between clients... thanks
Unable resolve internal DNS queries when using iOS and a split tunnel through APM
Hi All, Am setting up APM for use as a SSL VPN for various different client systems. In general things are working well. Do have a problem with iOS devices and DNS though. If I use a Full tunnel (i.e. dont allow split tunnels) then resolving of internal DNS names works fine. Though when I change to allow a split tunnel (so that the users can access other Internet resources) then DNS requests don't seem to come in through the tunnel at all. If I do a tcpdump on the F5 I don't see any DNS requests at all - hence internal addresses won't resolve. I am guessing that it is using the carriers DNS servers instead of the ones I have specified? Is there a known way to resolve this? Is this a general iOS limitation or a limitation (or misconfiguration) of the VPN on the F5? JasonBIG-IP Edge Client v1.0.6 for iOS 7
With all your other iOS 7 updates (if you've made the plunge), if you are running the BIG-IP Edge Client on your iPhone, iPod or iPad, you may have gotten an AppStore alert for an update. If not, I just wanted to let you know that version 1.0.6 of the iOS Edge Client is available at the AppStore with iOS 7 support. Customers who use UDID in their access policies should have users update to this version. The BIG-IP Edge Client application from F5 Networks secures and accelerates mobile device access to enterprise networks and applications using SSL VPN and optimization technologies. Access is provided as part of an enterprise deployment of F5 BIG-IP Access Policy Manager, Edge Gateway, or FirePass SSL-VPN solutions. BIG-IP Edge Client for iOS Features: Provides accelerated mobile access when used with F5 BIG-IP Edge Gateway. Automatically roams between networks to stay connected on the go. Full Layer 3 network access to all your enterprise applications and files. ps Related: Manual: BIG-IP Edge Apps Client Compatibility Matrix BIG-IP Edge Client and BIG-IP Edge Portal for Apple iOS and Android software support policy Release Note: BIG-IP Edge Client for iOS 1.0.6 Advanced Edge Client Installation for Windows–The Mysteries of Windows Installer Revealed F5 BIG-IP Edge Client F5 BIG-IP Edge Portal F5 BIG-IP Edge Client for Android Technorati Tags: f5,big-ip,edge client,ssl-vpn,mobile,smartphone,ios7,apple,iphone,ipad,silva,remote access,security,secure access,apm Connect with Peter: Connect with F5:
