Manual Chapter :
Access Policy Manager configuration for F5 Access
Applies To:
Show VersionsBIG-IP APM
- 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 12.1.4
Access Policy Manager configuration for F5 Access
To configure F5 Access for
iOS
device support on BIG-IP Access Policy Manager, use the
following configuration steps:- Run the Network Access Setup Wizard.
- Optionally, set upSSOandACLsfor your network access. Refer to theBIG-IP Access Policy Manager Configuration Guideon the AskF5 Knowledge Base for instructions.
- Customize an access policy to support F5 Access.
Running the Network Access Setup wizard
Configure Access Policy Manager® to provide users with full network
access from their devices using the Network Access Setup wizard for remote
access.
- On the Main tab, click.The Device Wizards screen opens.
- For Access Policy Manager Configuration, selectNetwork Access Setup Wizard for Remote Access, and then clickNext.
- In the Basic Properties area of the wizard, clear theEnable Antivirus Check in Access Policycheck box for Client Side Checks to ensure that your users can connect with F5 Access. Fill in the fields for Device Wizard screens.
- ClickFinished.
You now have network access resource that
supports F5 Access for mobile devices.
Customizing client proxy settings for iOS
iOS
Configure Network Access to provide further fucntionality for F5 Access connections.
- On the Main tab, click.The Network Access List screen opens.
- Select a Network Access resource to edit.
- SelectClient Proxy Settings.
- If you want to use an optional client proxy autoconfig (PAC) script, in theClient Proxy Autoconfig Scriptfield type the URL for a proxy auto config script.
- If you want to use an optional client proxy address, in theClient Proxy Addressfield, type the IP address for the client proxy server that network access clients use to connect to the Internet.
- If you want to use an optional client proxy port, in theClient Proxy Port Typetype the port number on the proxy server that you want network access clients to use to connect to the Internet.
- If you want to bypass some addresses with the client proxy, in theClient Proxy Exclusion Listfield specify the Web addresses that do not need to be accessed through the proxy server. You can use wild cards to match domain and host names or addresses. For example,www.*.com,128.*, /,8.,mygroup.*, and*.*.
Customizing an access policy to support F5 Access on Access Policy Manager
Create an access policy that supports F5 Access for
iOS
. - On the Main tab, click.The Access Profiles (Per-Session Policies) screen opens.
- In the Per-Session Policy column, click theEditlink for the access profile you want to configure.The visual policy editor opens the access policy in a separate screen.
- Click the plus(+)sign that appears before theLogon Pageaction.
- UnderServer Side Checks, selectClient Type, and clickAdd Item.
- ClickSave.The Client Type action is added to the access policy, and several new branches appear.
- On the Edge Client branch of the Client Type action, click the plus(+)sign.
- UnderServer Side Checks, selectClient OS, and clickAdd Item.
- Configure theiOSBranch Rule with the configuration objects and resources you want to assign to iOS F5 Access.
- ClickFinished, and then clickSave.
- Add the network access resource to the branch.
- ClickSave.This access policy now supports F5 Access foriOS.