Manual Chapter : Configuring Webtops

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 8.3.0, 8.2.0, 8.1.0, 8.0.0
Manual Chapter

Configuring Webtops

About webtops

There are three webtop types you can define on the Access module for BIG-IQ. You can define a network access only webtop, a portal access webtop, or a full webtop.
Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  • A network access webtop provides a webtop for an access policy branch to which you assign only a network access resource for starting a network access connection that provides full network access.
  • A portal access webtop provides a webtop for an access policy branch to which you assign only portal access resources. When a user selects a resource, the BIG-IP device managed by BIG-IQ communicates with back-end servers and rewrites links in application web pages so that further requests from the client browser are directed back to the BIG-IP device managed by BIG-IQ.
  • A full webtop provides an access policy ending for an access policy branch to which you can optionally assign portal access resources, app tunnels, remote desktops, and webtop links, in addition to network access tunnels. Then, the full webtop provides your clients with a web page on which they can choose resources, including a network access connection to start.
    If you add a network access resource with Auto launch enabled to the full webtop, the network access resource starts when the user reaches the webtop. You can add multiple network access resources to a webtop, but only one can have Auto launch enabled.

Configure webtop lists

From BIG-IQ, you may create a webtop list. You can choose between a full webtop, a network access webtop, or a portal access webtop.
  1. At the top of the screen, select
    Configuration
    , then on the left side of the screen, click
    ACCESS
    Access Groups
    .
  2. Click the name of an Access group.
    A new screen displays the group's properties.
  3. Navigate to
    WEBTOPS
    Webtop List
    .
  4. The screen displays the webtops in the working configuration for the Access group.
    • To configure the properties for a webtop list, click its name in the table.
    • To locate a specific webtop list, type its name in the filter.
    • To create a new webtop list, click the
      Create
      button.
    • To delete one or more webtop lists, select the check box next to each webtop list and click the
      Delete
      button.
  5. Select
    Create
    or select an existing resource to configure.
  6. In the
    Name
    field, type a name for this webtop list.
  7. Enter a
    Partition
    . The default is
    Common
    . You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the webtop list resides in the
    Common
    partition, all users can access it.
  8. From the
    Type
    drop down menu, select
    Network Access
    ,
    Portal Access
    , or
    Full
    .
  9. Click
    Save
    .
Your new webtop will be displayed in the Webtop List.

Create a webtop link

You can create and customize links that you can assign to full webtops. In this context,
links
are defined applications and websites that appear on a webtop, and can be clicked to open a web page or application. You can customize these links with descriptions and icons.
  1. At the top of the screen, select
    Configuration
    , then on the left side of the screen, click
    ACCESS
    Access Groups
    .
  2. Click the name of an Access group.
    A new screen displays the group's properties.
  3. On the left, expand
    Webtops
    and click
    Webtop Links
    .
  4. Click
    Create
    .
    The New Webtop Link screen opens.
  5. The screen displays webtop links in the working configuration for the Access group.
    • To configure the properties for a webtop link, click its name in the table.
    • To locate a specific webtop link, type its name in the filter.
    • To create a new webtop link, click the
      Create
      button.
    • To delete a webtop link, select the check box next to the webtop link and click the
      Delete
      button. You can delete more than one link by selecting the check box next to multiple links. However, you cannot delete a webtop link that is used by an access policy.
  6. Click
    Create
    or select an existing link to begin configuration.
  7. Enter a unique
    Name
    for this resource.
  8. Enter a
    Partition
    . The default is
    Common
    . You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the
    Common
    partition, all users can access it.
  9. From the
    Link Type
    list, select whether the link is a URI or hosted content.
    • If you selected
      Application URI
      , in the
      Application URI
      field, type the application URI.
    • If you selected
      Hosted Content
      , select the hosted file to use for the webtop link.
  10. To attach this portal address resource to a per-session access policy associated with an Ephemeral Authentication virtual server, select the
    Ephemeral Authentication Resource
    check box.
  11. In the
    Caption
    field, type a descriptive caption.
    The
    Caption
    field is pre-populated with the text from the
    Name
    field. Type the link text that you want to appear on the web link.
  12. If you want to add a detailed description, type it in the
    Detailed Description
    field.
  13. To specify an icon image for the item on the webtop, click in the
    Image
    field and choose an image, or click the
    Browse
    button.
    Click the
    View/Hide
    link to show or hide the currently selected image.
  14. To save your changes, click the
    Save & Close
    button at the bottom of the screen.
The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.
Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either an advanced resource assign action or a webtop, links and sections assign action.

Create a webtop section

From BIG-IQ, you may create a webtop section to specify a caption to display on a full webtop for a list of resources. You may also specify the order of the webtop section relative to other webtop sections.
  1. At the top of the screen, select
    Configuration
    , then on the left side of the screen, click
    ACCESS
    Access Groups
    .
  2. Click the name of an Access group.
    A new screen displays the group's properties.
  3. Expand
    Webtops
    and click
    Webtop Sections
    .
  4. You will be navigated to a page where the existing webtop sections are displayed.
    • To configure the properties for an existing webtop section, click its name in the table.
    • To locate a specific webtop section, type its name in the filter.
    • To create a new webtop section, click the
      Create
      button.
    • To delete a webtop section, select the check box next to the webtop section and click the
      Delete
      button. You can delete more than one section by selecting the check box next to multiple sections. You cannot delete a webtop section that is used by an access policy.
    • To change the order of a section up or down, select the check box next to the webtop section and click
      Change Order
      .
  5. Click
    Create
    .
    The New Webtop Sections screen opens.
  6. In the
    Name
    field, type a name for the webtop section.
  7. Enter a
    Partition
    . The default is
    Common
    . You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the
    Common
    partition, all users can access it.
  8. From the
    Display Order
    list, select one the options.
    Specify the display order of this webtop section relative to others on the webtop.
    • First
      : Places this webtop section first.
    • After
      : When selected, an additional list displays; select a webtop section from it to place this webtop section after it in order.
    • Specify
      : When selected, an additional field displays. Type an integer in it to specify the absolute order for this webtop section.
  9. From the
    Initial State
    list, select the initial display state:
    • Expanded
      : Displays the webtop section with the resource list expanded.
    • Collapsed
      : Displays the webtop section with the resource list collapsed.
  10. To save your changes, click the
    Save & Close
    button at the bottom of the screen.
The new webtop section will be displayed in the webtop section list.

Manage hosted content files

Follow the procedure below to upload a new version of a file to hosted content, to replace the current file on the BIG-IQ system.
  1. At the top of the screen, select
    Configuration
    , then on the left side of the screen, click
    ACCESS
    Access Groups
    .
  2. Click the name of an Access group.
    A new screen displays the group's properties.
  3. Navigate to
    WEBTOPS
    Hosted Content
    Manage Files
    .
  4. The screen displays the hosted content files in the working configuration for the Access group.
    • To configure the properties for a file, click its name in the table.
    • To locate a specific file, type its name in the filter.
    • To upload a file, click the
      Upload
      button.
    • To delete one or more hosted content files, select the check box next to each file and click the
      Delete
      button.
  5. Click
    Create
    or select an existing resource to begin configuration.
  6. Enter a
    Name
    for this resource.
  7. Enter a
    Partition
    . The default is
    Common
    . You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the
    Common
    partition, all users can access it.
  8. Click
    Choose File
    and select the file to upload.
  9. In the
    File Destination Folder
    , specify a new destination folder for the file.
  10. From the
    Secure Level
    menu, select the access level for the file.
  11. Click
    Save
    .

Manage profile access status

From BIG-IQ, you may view and manage the profile access status for hosted content in the working configuration for the Access group. To view this screen, navigate to
Configuration
ACCESS
Access Groups
and select or create an Access group. Navigate to
WEBTOPS
Manage Profile Access
.
  • To configure the properties for a profile access, click its name in the table.
  • To locate a specific profile access, type its name in the filter.
  • To allow or disallow public access for a managed profile, click the
    Allow/Disallow Publish Access
    button.
View the properties of a profile by column:
  • Name
    - Displays the name of the managed profile.
  • Partition/Path
    - Displays the name of the BIG-IP device partition or path on which the webtop section exists.
  • Retain Public Access
    - Displays whether or not the profile is publicly accessible.