Manual Chapter : About Client-Side Capability

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.0.1, 15.0.0
Manual Chapter

About Client-Side Capability

Starting from the APM Clients release 7.1.5, the APM Clients do not use browser plugins. So, the Client-Side Capability agent should not be used to determine if a client is capable of running the client-side endpoint security checks or of establishing VPN, Dynamic or Static Application tunnels.
The Client-Side Capability action determines whether the client is fully capable of running endpoint security (client-side) actions. The Client-Side Capability action includes two branches.
Branch
Description
Full
Indicates that the user is connecting with a client that has full client-side check support.
fallback
Indicates that the user is connecting with a client that does not fully support client-side checks.
This action can be very useful as one of the first checks in an access policy. The
Full
branch can include the required client-side checks for those clients that are capable, while the fallback branch can lead to access policy branches for other clients.
This figure shows an example in which the Client-Side Capability action is used to verify that the client is capable of running a client-side check before running the client-side check for antivirus software.
Client-side capability check before a client-side check
Client-Side Capability action with Anti-Spyware action on the Full branch and no action on the fallback branch.
In practice, an access policy would usually include a logon action, an authentication action, and other actions.