[AV Check] How to disable checking if Windows Defender is up-to-date during client-side check
Hello DevCentral users, I am currently trying to figure out how to avoid running into issues when one of my users has eSet Endpoint Security installed on their Windows 10 devices. When a user installs eSet Endpoint Security it automatically disables the built-in Windows Defender. This disabled Windows Defender however is being found by the antivirus client-side check in my Access Policy. The user is then not able to log into my SSL-VPN. I would like to know how to built an antivirus client-side check into my Access Policy where it doesn't matter which AV product a user has as long as its virus definitions have been updated at least 7 days ago, like this: I've added Windows Defender as a second AV but when I do get it to work (no check on if the definitions are up-to-date) it won't suffice for users who only have Windows Defender installed. Does anyone have any tips or tricks on how to set this up? Thanks in advance!
F5 APM: Traffic between two ssl vpn clients
Hello, is there a way to drop traffic between two ssl vpn users? right now when 2 or more users are connected, there is nothing to prevent them from sharing files or communicating with each other... we would like to create sort of "private vlan" or isolation between clients... thanks
Unable resolve internal DNS queries when using iOS and a split tunnel through APM
Hi All, Am setting up APM for use as a SSL VPN for various different client systems. In general things are working well. Do have a problem with iOS devices and DNS though. If I use a Full tunnel (i.e. dont allow split tunnels) then resolving of internal DNS names works fine. Though when I change to allow a split tunnel (so that the users can access other Internet resources) then DNS requests don't seem to come in through the tunnel at all. If I do a tcpdump on the F5 I don't see any DNS requests at all - hence internal addresses won't resolve. I am guessing that it is using the carriers DNS servers instead of the ones I have specified? Is there a known way to resolve this? Is this a general iOS limitation or a limitation (or misconfiguration) of the VPN on the F5? Jason
