Manual :
BIG-IP Access Policy Manager: Secure Web Gateway
Applies To:
-
BIG-IP APM
14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0
- Overview: Configuring explicit forward proxy for Network Access
- Prerequisites for an explicit forward proxy configuration for Network Access
- Configuration outline: Explicit forward proxy for Network Access
- Creating a connectivity profile
- Adding a connectivity profile to a virtual server
- Creating a DNS resolver
- Adding forward zones to a DNS resolver
- Creating a custom HTTP profile for explicit forward proxy
- Creating a virtual server as the forward proxy for Network Access traffic
- Creating a wildcard virtual server for HTTP tunnel traffic
- Creating a custom Client SSL forward proxy profile
- Creating a custom Server SSL profile
- Creating a wildcard virtual server for SSL traffic on the HTTP tunnel
- Updating the access policy in the remote access configuration
- Configuring a Network Access resource to forward traffic
- Implementation result
- About configuration elements for explicit forward proxy (remote access)
- Per-request policy items that read session variables
- Overview: Configuring transparent forward proxy for remote access
- Prerequisites for APM transparent forward proxy for remote access
- Configuration outline for APM transparent forward proxy for remote access
- Creating a connectivity profile
- Adding a connectivity profile to a virtual server
- Creating an access profile for transparent forward proxy
- Creating a wildcard virtual server for HTTP traffic on the connectivity interface
- Creating a custom Client SSL forward proxy profile
- Creating a custom Server SSL profile
- Creating a wildcard virtual server for SSL traffic on the connectivity interface
- Updating the access policy in the remote access configuration
- Implementation result
- About configuration elements for transparent forward proxy (remote access)
- Per-request policy items that read session variables
- Overview: Configuring APM to act as an explicit forward proxy
- Task summary
- Task list
- About the iApp for Secure Web Gateway configuration
- Browser and firewall configuration best practices for explicit forward proxy
- Creating a DNS resolver
- Adding forward zones to a DNS resolver
- Creating a tunnel for SSL forward proxy traffic
- Creating a custom HTTP profile for explicit forward proxy
- Creating an access profile for explicit forward proxy
- Creating a virtual server to use as the forward proxy server
- Creating a custom Client SSL forward proxy profile
- Creating a custom Server SSL profile
- Creating a virtual server for SSL forward proxy traffic
- Creating a virtual server to reject traffic
- Implementation result
- About APM ACLs and explicit forward proxy
- Overview: Processing RDP traffic on a device configured for explicit forward proxy
- Creating a virtual server for RDP client traffic
- About wildcard virtual servers on the HTTP tunnel interface
- BIG-IP system forward proxy chaining and APM benefits
- Interoperability characteristics for forward proxy chaining
- Configuration essentials for forward proxy chaining
- Overview: Offloading authentication from the next hop
- Overview: Using NTLM pass-through to the next hop
- Overview: Inserting HTTP headers for authentication to the next hop
- Overview: Authenticating with HTTP Basic to the next hop
- Overview: Configuring Basic or NTLM SSO to the next hop
- Overview: Configuring Kerberos SSO to the next hop
- Overview: Configuring Kerberos SSO to a resource server
- Overview: Updating virtual servers for forward proxy chaining with APM
- Overview: Configuring transparent forward proxy
- Task summary
- Task list
- About the iApp for Secure Web Gateway configuration
- About user identification with a logon page
- About user identification with an SWG F5 agent
- Creating a VLAN for transparent forward proxy
- Assigning a self IP address to a VLAN
- Creating an access profile for transparent forward proxy
- Creating a custom Client SSL forward proxy profile
- Creating a custom Server SSL profile
- Creating a virtual server for forward proxy SSL traffic
- Creating a virtual server for forward proxy traffic
- Creating a Client SSL profile for a captive portal
- Creating a virtual server for a captive portal
- Implementation result
- About redirects after access denied by captive portal
- Overview: Configuring transparent forward proxy in inline mode
- Task summary
- Task list
- About the iApp for Secure Web Gateway configuration
- Creating a VLAN for transparent forward proxy
- Assigning a self IP address to a VLAN
- Creating an access profile for transparent forward proxy
- Creating a custom Client SSL forward proxy profile
- Creating a custom Server SSL profile
- Creating a virtual server for forward proxy SSL traffic
- Creating a virtual server for forward proxy traffic
- Creating a forwarding virtual server
- Creating a Client SSL profile for a captive portal
- Creating a virtual server for a captive portal
- Implementation result
- About user identification with an SWG F5 agent
- Overview: Configuring the SWG F5 DC Agent
- Considerations for installing multiple agents
- Task summary
- Configuring the BIG-IP system for the F5 DC Agent
- Verifying network communication
- Downloading and installing F5 DC Agent
- Updating privileges for the F5 DC Agent service
- Configuring the initialization file
- Configuring domain controller polling in the dc_agent.txt file
- Recovering from an unsuccessful installation
- Enabling debug logging for the F5 DC Agent
- Troubleshooting when a user is identified incorrectly
- F5 DC Agent error messages
- Overview: Configuring the SWG F5 Logon Agent
- F5 Logon Agent identification process
- Considerations for installing multiple agents
- Task summary
- Configuring the BIG-IP system for the F5 Logon Agent
- Verifying network communication
- Downloading and installing F5 Logon Agent
- Updating privileges for the F5 Logon Agent service
- Configuring the initialization file
- Recovering from an unsuccessful installation
- Enabling debug logging for the F5 Logon Agent
- Troubleshooting when a user is identified incorrectly
- Files used by Logon Agent
- Overview: Creating a script on a Windows system for SWG F5 Logon Agent
- Creating a logon or logout script
- Running a logon or logout script on Active Directory
- Logon and logout script parameters