Manual Chapter : Access Policy Manager configuration for F5 Access for iOS devices

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 14.0.0, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.3, 11.6.3, 11.5.7
Manual Chapter

Access Policy Manager configuration for F5 Access for iOS devices

To configure F5 Access for mobile devices support on BIG-IP® Access Policy Manager®, use the following configuration steps:

  • Run the Network Access Setup Wizard.
  • Optionally, set up SSO and ACLs for your network access. Refer to the BIG-IP® Access Policy Manager® Configuration Guide on the AskF5™ Knowledge Base for instructions.
  • Customize an access policy to support F5 Access.

Running the Network Access Setup wizard

Configure Access Policy Manager® to provide users with full network access from their mobile devices using the Network Access Setup wizard for remote access.
  1. On the Main tab, click Wizards > Device Wizards .
    The Device Wizards screen opens.
  2. For Access Policy Manager Configuration, select Network Access Setup Wizard for Remote Access, and then click Next.
  3. In the Basic Properties area of the wizard, clear the Enable Antivirus Check in Access Policy check box for Client Side Checks to ensure that your users can connect with F5 Access.
  4. Click Finished.
You now have network access resource that supports F5 Access for mobile devices.

Customizing client proxy settings for macOS

Configure Network Access to provide further fucntionality for F5 Access connections.
  1. On the Main tab, click Access > Connectivity / VPN > Network Access (VPN) .
    The Network Access List screen opens.
  2. Select a Network Access resource to edit.
  3. Select Client Proxy Settings.
  4. If you want to use an optional client proxy autoconfig (PAC) script, in the Client Proxy Autoconfig Script field type the URL for a proxy auto config script.
  5. If you want to use an optional client proxy address, in the Client Proxy Address field, type the IP address for the client proxy server that network access clients use to connect to the Internet.
  6. If you want to use an optional client proxy port, in the Client Proxy Port Type type the port number on the proxy server that you want network access clients to use to connect to the Internet.
  7. If you want to bypass some addresses with the client proxy, in the Client Proxy Exclusion List field specify the Web addresses that do not need to be accessed through the proxy server. You can use wild cards to match domain and host names or addresses. For example, www.*.com, 128.*, /, 8., mygroup.*, and *.*.

Customizing an access policy to support F5 Access on Access Policy Manager

Create an access policy that supports F5 Access for iOS.
  1. On the Main tab, click Access > Profiles / Policies .
    The Access Profiles (Per-Session Policies) screen opens.
  2. In the Per-Session Policy column, click the Edit link for the access profile you want to configure.
    The visual policy editor opens the access policy in a separate screen.
  3. Click the plus (+) sign that appears before the Logon Page action.
  4. Under Server Side Checks, select Client Type, and click Add Item.
  5. Click Save.
    The Client Type action is added to the access policy, and several new branches appear.
  6. On the Edge Client branch of the Client Type action, click the plus (+) sign.
  7. Under Server Side Checks, select Client OS, and click Add Item.
  8. Configure the iOS Branch Rule with the configuration objects and resources you want to assign to iOS F5 Access.
  9. Click Finished, and then click Save.
  10. Add the network access resource to the branch.
  11. Click Save.
    This access policy now supports F5 Access for iOS.