F5 Logo MyF5
Search
  1. MyF5 Home
  2. Knowledge Centers
  3. BIG-IP APM
  4. BIG-IP Access Policy Manager: Application Access
  5. Configuring Webtops
Manual Chapter : Configuring Webtops

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
Manual Chapter
Table of Contents | << Previous Chapter | Next Chapter >>

About webtops

There are three webtop types you can define on Access Policy Manager (APM). You can define a network access as only a webtop, a portal access webtop, or a full webtop.

Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  • A network access webtop provides a webtop for an access policy branch to which you assign only a network access resource.
  • A portal access webtop provides a webtop for an access policy branch to which you assign only portal access resources.
  • A full webtop provides an access policy ending for an access policy branch to which you can optionally assign portal access resources, app tunnels, remote desktops, and webtop links, in addition to network access tunnels. Then, the full webtop provides your clients with a web page on which they can choose a network access connection to start.
    Note: If you add a network access resource with Auto launch enabled to the full webtop, the network access resource starts when the user reaches the webtop. You can add multiple network access resources to a webtop, but only one can have Auto launch enabled.
resource assign with resources and webtop Resource assign action with resources and a webtop assigned

Configuring a full webtop

A full webtop allows your users to connect and disconnect from a network access connection, portal access resources, SAML resources, app tunnels, remote desktops, and administrator-defined links.
  1. On the Main tab, click Access Policy > Webtops.
  2. Click Create to create a new webtop.
  3. Type a name for the webtop you are creating.
  4. From the Type list, select Full.
  5. Click Finished.
The webtop is now configured, and appears in the list. You can edit the webtop further, or assign it to an access policy.
To use this webtop, it must be assigned to an access policy with an advanced resource assign action or with a webtop and links assign action. All resources assigned to the full webtop are displayed on the full webtop.

Creating a webtop link

You can create and customize links that you can assign to full webtops. In this context, links are defined applications and websites that appear on a webtop, and can be clicked to open a web page or application. You can customize these links with descriptions and icons.
  1. On the Main tab, click Access Policy > Webtops > Webtop Links.
  2. Click Create to create a new webtop link.
  3. In the Name field, type a name for the new webtop link.
  4. From the Link Type list, select whether the link is a URI or hosted content.
    • If you selected Application URI, in the Application URI field, type the application URI.
    • If you selected Hosted Content, select the hosted file to use for the webtop link.
  5. In the Caption field, type a descriptive caption. The Caption field is pre-populated with the text from the Name field. Type the link text that you want to appear on the web link.
  6. If you want to add a detailed description, type it in the Detailed Description field.
  7. To specify an icon image for the item on the webtop, click in the Image field and choose an image, or click the Browse button. Click the View/Hide link to show or hide the currently selected image.
  8. Click Finished.
The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.
Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either an advanced resource assign action or a webtop and links assign action.
Customizing a webtop link
You can customize links that you assign to full webtops.
  1. On the Main tab, click Access Policy > Webtops > Webtop Links.
  2. Click the name of the webtop link you want to customize. The properties screen for the webtop link appears.
  3. To change the description of the link, in the Description field, type a new description.
  4. To change the URI of the link, in the Application URI field, type the application URI.
  5. If you made changes on the properties screen, click Update.
  6. Click the Customization tab.
  7. Select the Language to customize, or click the Create button to create a new language customization.
  8. If you clicked Create to create a new language customization, from the Language list, select the language to customize.
  9. In the Caption field, type a descriptive caption.
  10. In the Detailed Description field, type a detailed description.
  11. In the Image field, click Browse to select an image to show on the webtop to represent the webtop link. Click the View/Hide link to show the currently assigned image. A webtop link image can be a GIF, BMP, JPG or PNG image up to 32 x 32 pixels in size.
  12. Click Finished.
The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.
Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either an advanced resource assign action or a webtop and links assign action.

Webtop properties

Use these properties to configure a webtop.

Property setting Value Description
Type Network Access, Portal Access, or Full
  • Use Network Access for a webtop to which you assign only a single network access resource.
  • Use Portal Access for a webtop to which you assign only portal access resources.
  • Use Full for a webtop to which you assign one or more network access resources, multiple portal access resources, and multiple application access application tunnel resources, or any combination of the three types.
Portal Access Start URI URI. Specifies the URI that the web application starts. For full webtops, portal access resources are published on the webtop with the associated URI you define when you select the Publish on Webtop option.
Minimize to Tray Enable or Disable. If this check box is selected, the webtop is minimized to the system tray automatically after the network access connection starts. With a network access webtop, the webtop automatically minimizes to the tray. With a full webtop, the webtop minimizes to the system tray only after the network access connection is started.

Adding a webtop and webtop links to an access policy

You must have an access profile set up before you can start this task.
You can add the webtop and webtop links assign action to an access policy to add a webtop and webtop links to an access policy branch. Webtop links are displayed on a full webtop.
Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  1. On the Main tab, click Access Policy > Access Profiles. The Access Profiles List screen opens.
  2. Click the name of the access profile for which you want to edit the access policy. The properties screen opens for the profile you want to edit.
  3. On the menu bar, click Access Policy. The Access Policy screen opens.
  4. Click Edit Access Policy for Profile profile_name. The visual policy editor opens the access policy in a separate screen.
  5. On an access policy branch, click the (+) icon to add an item to the access policy. A popup screen displays actions on tabs, such as General Purpose and Authentication, and provides a search field.
  6. On the Assignment tab, select the Webtop and Links Assign agent and click Add Item. The Webtop and Links Assignment screen opens.
  7. In the Name field, type a name for the access policy item. This name is displayed in the action field for the access policy.
  8. On the Webtop & Webtop Links Assignment screen, next to the type of resource you want to add, click the Add/Delete link. Available resources are listed.
  9. To assign resources, select the options you want.
  10. Click the Save button to save changes to the access policy item.
You can now configure further actions on the successful and fallback rule branches of this access policy item.
Click the Apply Access Policy link to apply and activate your changes to this access policy.

Assigning resources to a user

Before you start this task, you must have created an access profile.
You can add the advanced resource assign action to an access policy to add a network access resource, portal access resources, application tunnel resources, SAML resources, and remote desktop resources to an access policy branch. You can also assign ACLs, webtops, and webtop links with the advanced resource assign action.
Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  1. On the Main tab, click Access Policy > Access Profiles. The Access Profiles List screen opens.
  2. Click the name of the access profile for which you want to edit the access policy. The properties screen opens for the profile you want to edit.
  3. On the menu bar, click Access Policy. The Access Policy screen opens.
  4. Click Edit Access Policy for Profile profile_name. The visual policy editor opens the access policy in a separate screen.
  5. On an access policy branch, click the (+) icon to add an item to the access policy. A popup screen displays actions on tabs, such as General Purpose and Authentication, and provides a search field.
  6. On the Assignment tab, select Advanced Resource Assign and click the Add Item button. The Advanced Resource Assign popup screen opens.
  7. In the Name field, type a name for the access policy item. This name is displayed in the action field for the access policy.
  8. Click the Add new entry button. A new resource line is added to the list.
  9. To assign resources, in the Expression area, click the Add/Delete link. The Resource Assignment popup screen opens.
  10. Assign resources to the access policy using the available tabs.
    Tab Description
    Static ACLs Allows you to select one or more ACLs defined on the system. Each ACL you select is assigned to the access policy branch on which this resource assign action operates.
    Network Access Allows you to select a single network access resource from the system. You can select only one network access resource. The network access resource you select is assigned to the access policy branch on which this resource assign action operates.
    Portal Access Allows you to select one or more portal access resources from the system. The portal access resources you select are assigned to the access policy branch on which this resource assign action operates.
    App Tunnel Allows you to select one or more application tunnel resources from the system. The application tunnel resources you select are assigned to the access policy branch on which this resource assign action operates.
    Remote Desktop Allows you to select one or more remote desktop (terminal server) resources from the system. The remote desktop resources you select are assigned to the access policy branch on which this resource assign action operates.
    SAML Allows you to select one or more SAML resources from the system. The SAML resources you select are assigned to the access policy branch on which this resource assign action operates. Select a full webtop to display SAML resources.
    Webtop Links Allows you to select links to pages and applications defined on the system to display on the full webtop. A full webtop must be assigned to display webtop links.
    Webtop Allows you to select a webtop from the system. The webtop resource you select is assigned to the access policy branch on which this resource assign action operates. You can select a webtop that matches the resource type, or a full webtop.
    Static Pool Allows you to dynamically assign a predefined LTM pool to a session. This value takes precedence over any existing assigned pool attached to the virtual server. The static pool you select is assigned to the access policy branch on which this resource assign action operates.
    Note: You can also search for a resource by name in the current tab or all tabs.
  11. Click the Save button to save changes to the access policy item.
You can now configure further actions on the successful and fallback rule branches of this access policy item.
Click the Apply Access Policy link to apply and activate your changes to this access policy.
Table of Contents | << Previous Chapter | Next Chapter >>
Contact Support Contact Support

Have a Question?

Support and Sales >

About F5

Education

F5 Sites

Support Tasks




©2023 F5 Networks, Inc. All rights reserved.


Trademarks Policies Privacy California Privacy Do Not Sell My Personal Information