Configuring Webtops

About webtops

There are three webtop types you can define on the Access module for BIG-IQ. You can define a network access only webtop, a portal access webtop, or a full webtop.

Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.

• A network access webtop provides a webtop for an access policy branch to which you assign only a network access resource for starting a network access connection that provides full network access.

• A portal access webtop provides a webtop for an access policy branch to which you assign only portal access resources. When a user selects a resource, the BIG-IP device managed by BIG-IQ communicates with back-end servers and rewrites links in application web pages so that further requests from the client browser are directed back to the BIG-IP device managed by BIG-IQ.

• A full webtop provides an access policy ending for an access policy branch to which you can optionally assign portal access resources, app tunnels, remote desktops, and webtop links, in addition to network access tunnels. Then, the full webtop provides your clients with a web page on which they can choose resources, including a network access connection to start.

  Note: If you add a network access resource with Auto launch enabled to the full webtop, the network access resource starts when the user reaches the webtop. You can add multiple network access resources to a webtop, but only one can have Auto launch enabled.

Configure webtop lists

From BIG-IQ, you may create a webtop list. You can choose between a full webtop, a network access webtop, or a portal access webtop.

1. At the top of the screen, select Configuration, then on the left side of the screen, click ACCESS > Access Groups.

2. Click the name of an Access group.

   A new screen displays the group’s properties.

3. Navigate to WEBTOPS > Webtop List.

4. The screen displays the webtops in the working configuration for the Access group.

   • To configure the properties for a webtop list, click its name in the table.
   • To locate a specific webtop list, type its name in the filter.
   • To create a new webtop list, click the Create button.
   • To delete one or more webtop lists, select the check box next to each webtop list and click the Delete button.

5. Select Create or select an existing resource to configure.

6. In the Name field, type a name for this webtop list.

7. Enter a Partition. The default is Common. You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the webtop list resides in the Common partition, all users can access it.

8. From the Type drop down menu, select Network Access, Portal Access, or Full.

9. Click Save.

Your new webtop will be displayed in the Webtop List.

Create a webtop link

You can create and customize links that you can assign to full webtops. In this context, links are defined applications and websites that appear on a webtop, and can be clicked to open a web page or application. You can customize these links with descriptions and icons.

1. At the top of the screen, select Configuration, then on the left side of the screen, click ACCESS > Access Groups.

2. Click the name of an Access group.

   A new screen displays the group’s properties.

3. Expand Webtops and click Webtop Links.

4. Click Create.

   The New Webtop Links screen opens.

5. The screen displays webtop links in the working configuration for the Access group.

   • To configure the properties for a webtop link, click its name in the table.
   • To locate a specific webtop link, type its name in the filter.
   • To create a new webtop link, click the Create button.
   • To delete a webtop link, select the check box next to the webtop link and click the Delete button. You can delete more than one link by selecting the check box next to multiple links. However, you cannot delete a webtop link that is used by an access policy.

6. Click Create or select an existing link to begin configuration.

7. Enter a unique Name for this resource.

8. Enter a Partition. The default is Common. You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the Common partition, all users can access it.

9. From the Link Type list, select whether the link is a URI or hosted content.

   • If you selected Application URI, in the Application URI field, type the application URI.
   • If you selected Hosted Content, select the hosted file to use for the webtop link.

10. In the Caption field, type a descriptive caption.

    The Caption field is pre-populated with the text from the Name field. Type the link text that you want to appear on the web link.

11. If you want to add a detailed description, type it in the Detailed Description field.

12. To specify an icon image for the item on the webtop, click in the Image field and choose an image, or click the Browse button.

    Click the View/Hide link to show or hide the currently selected image.

13. To save your changes, click the Save & Close button at the bottom of the screen.

The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.

Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either an advanced resource assign action or a webtop, links and sections assign action.

Create a webtop section

From BIG-IQ, you may create a webtop section to specify a caption to display on a full webtop for a list of resources. You may also specify the order of the webtop section relative to other webtop sections.

1. At the top of the screen, select Configuration, then on the left side of the screen, click ACCESS > Access Groups.

2. Click the name of an Access group.

   A new screen displays the group’s properties.

3. Expand Webtops and click Webtop Sections.

4. You will be navigated to a page where the existing webtop sections are displayed.

   • To configure the properties for an existing webtop section, click its name in the table.
   • To locate a specific webtop section, type its name in the filter.
   • To create a new webtop section, click the Create button.
   • To delete a webtop section, select the check box next to the webtop section and click the Delete button. You can delete more than one section by selecting the check box next to multiple sections. You cannot delete a webtop section that is used by an access policy.
   • To change the order of a section up or down, select the check box next to the webtop section and click Change Order.

5. Click Create.

   The New Webtop Sections screen opens.

6. In the Name field, type a name for the webtop section.

7. Enter a Partition. The default is Common. You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the Common partition, all users can access it.

8. From the Display Order list, select one the options.

   Specify the display order of this webtop section relative to others on the webtop.

   • First: Places this webtop section first.
   • After: When selected, an additional list displays; select a webtop section from it to place this webtop section after it in order.
   • Specify: When selected, an additional field displays. Type an integer in it to specify the absolute order for this webtop section.

9. From the Initial State list, select the initial display state:

   • Expanded: Displays the webtop section with the resource list expanded.
   • Collapsed: Displays the webtop section with the resource list collapsed.

10. To save your changes, click the Save & Close button at the bottom of the screen.

The new webtop section will be displayed in the webtop section list.

Manage hosted content files

Follow the procedure below to upload a new version of a file to hosted content, to replace the current file on the BIG-IQ system.

1. At the top of the screen, select Configuration, then on the left side of the screen, click ACCESS > Access Groups.

2. Click the name of an Access group.

   A new screen displays the group’s properties.

3. Navigate to WEBTOPS > Hosted Content > Manage Files.

4. The screen displays the hosted content files in the working configuration for the Access group.

   • To configure the properties for a file, click its name in the table.
   • To locate a specific file, type its name in the filter.
   • To upload a file, click the Upload button.
   • To delete one or more hosted content files, select the check box next to each file and click the Delete button.

5. Click Create or select an existing resource to begin configuration.

6. Enter a Name for this resource.

7. Enter a Partition. The default is Common. You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the Common partition, all users can access it.

8. Click Choose File and select the file to upload.

9. In the File Destination Folder, specify a new destination folder for the file.

10. From the Secure Level menu, select the access level for the file.

11. Click Save.

Manage profile access status

From BIG-IQ, you may view and manage the profile access status for hosted content in the working configuration for the Access group. To view this screen, navigate to Configuration > ACCESS > Access Groups and select or create an Access group. Navigate to WEBTOPS > Manage Profile Access.

• To configure the properties for a profile access, click its name in the table.
• To locate a specific profile access, type its name in the filter.
• To allow or disallow public access for a managed profile, click the Allow/Disallow Publish Access button.

View the properties of a profile by column:

• Name - Displays the name of the managed profile.
• Partition/Path - Displays the name of the BIG-IP device partition or path on which the webtop section exists.
• Retain Public Access - Displays whether or not the profile is publicly accessible.