Forum Discussion

benderstine_258's avatar
benderstine_258
Icon for Nimbostratus rankNimbostratus
May 23, 2016
Solved

Understanding SSL VPN group configuration and virtual servers

Hello, I'm new to the f5 and the f5 SSL VPN configuration and have some conceptual questions around how to configure SSL VPN groups. I'm coming from a Juniper SSL appliance background and am migratin...
BIG-IP Access Policy Manager (APM)
security
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    May 23, 2016

    Hi,

     

    You can configure a new VS for each department but it can be hard to maintain. I would recommand to use AD resource Group Assign block in the Visual Policy Editor. This way, you can assign different resources (Network Access, RDP, Portal, ACL, webtops, etc.) based on the group membership of the user.

     

    You can also split your policy to behave differently if the starting landing uri is /sales or /it, ...

     

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous

Hi,

 

You can configure a new VS for each department but it can be hard to maintain. I would recommand to use AD resource Group Assign block in the Visual Policy Editor. This way, you can assign different resources (Network Access, RDP, Portal, ACL, webtops, etc.) based on the group membership of the user.

 

You can also split your policy to behave differently if the starting landing uri is /sales or /it, ...

 

benderstine_258's avatar
benderstine_258
Icon for Nimbostratus rankNimbostratus
May 24, 2016
That answered my question, thank you. I hadn't registered the existence of the AD resource Group Assign block.