Manual Chapter : Access Policy Manager configuration for F5 Access

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 12.1.4
Manual Chapter

Access Policy Manager configuration for F5 Access

To configure F5 Access for
iOS
device support on BIG-IP Access Policy Manager, use the following configuration steps:
  • Run the Network Access Setup Wizard.
  • Optionally, set up
    SSO
    and
    ACLs
    for your network access. Refer to the
    BIG-IP Access Policy Manager Configuration Guide
    on the AskF5 Knowledge Base for instructions.
  • Customize an access policy to support F5 Access.

Running the Network Access Setup wizard

Configure Access Policy Manager® to provide users with full network access from their devices using the Network Access Setup wizard for remote access.
  1. On the Main tab, click
    Wizards
    Device Wizards
    .
    The Device Wizards screen opens.
  2. For Access Policy Manager Configuration, select
    Network Access Setup Wizard for Remote Access
    , and then click
    Next
    .
  3. In the Basic Properties area of the wizard, clear the
    Enable Antivirus Check in Access Policy
    check box for Client Side Checks to ensure that your users can connect with F5 Access. Fill in the fields for Device Wizard screens.
  4. Click
    Finished
    .
You now have network access resource that supports F5 Access for mobile devices.

Customizing client proxy settings for
iOS

Configure Network Access to provide further fucntionality for F5 Access connections.
  1. On the Main tab, click
    Access
    Connectivity / VPN
    Network Access (VPN)
    .
    The Network Access List screen opens.
  2. Select a Network Access resource to edit.
  3. Select
    Client Proxy Settings
    .
  4. If you want to use an optional client proxy autoconfig (PAC) script, in the
    Client Proxy Autoconfig Script
    field type the URL for a proxy auto config script.
  5. If you want to use an optional client proxy address, in the
    Client Proxy Address
    field, type the IP address for the client proxy server that network access clients use to connect to the Internet.
  6. If you want to use an optional client proxy port, in the
    Client Proxy Port Type
    type the port number on the proxy server that you want network access clients to use to connect to the Internet.
  7. If you want to bypass some addresses with the client proxy, in the
    Client Proxy Exclusion List
    field specify the Web addresses that do not need to be accessed through the proxy server. You can use wild cards to match domain and host names or addresses. For example,
    www.*.com
    ,
    128.*
    , /,
    8.
    ,
    mygroup.*
    , and
    *.*
    .

Customizing an access policy to support F5 Access on Access Policy Manager

Create an access policy that supports F5 Access for
iOS
.
  1. On the Main tab, click
    Access
    Profiles / Policies
    .
    The Access Profiles (Per-Session Policies) screen opens.
  2. In the Per-Session Policy column, click the
    Edit
    link for the access profile you want to configure.
    The visual policy editor opens the access policy in a separate screen.
  3. Click the plus
    (+)
    sign that appears before the
    Logon Page
    action.
  4. Under
    Server Side Checks
    , select
    Client Type
    , and click
    Add Item
    .
  5. Click
    Save
    .
    The Client Type action is added to the access policy, and several new branches appear.
  6. On the Edge Client branch of the Client Type action, click the plus
    (+)
    sign.
  7. Under
    Server Side Checks
    , select
    Client OS
    , and click
    Add Item
    .
  8. Configure the
    iOS
    Branch Rule with the configuration objects and resources you want to assign to iOS F5 Access.
  9. Click
    Finished
    , and then click
    Save
    .
  10. Add the network access resource to the branch.
  11. Click
    Save
    .
    This access policy now supports F5 Access for
    iOS
    .