Applies To:

Show Versions Show Versions

Manual Chapter: Configuring Webtops
Manual Chapter
Table of Contents   |   << Previous Chapter

About webtops

There are three webtop types you can define on Access Policy Manager®. You can define a network access only webtop, a portal access webtop, or a full webtop.

Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  • A network access webtop provides a webtop for an access policy branch to which you assign only a network access resource.
  • A portal access webtop provides a webtop for an access policy branch to which you assign only portal access resources.
  • A full webtop provides an access policy ending for an access policy branch to which you can optionally assign portal access resources, app tunnels, remote desktops, and webtop links, in addition to a network access tunnel. The full webtop then provides your clients with a web page on which they can choose a network access connection to start.
resource assign with resources and webtop Resource assign action with resources and a webtop assigned

Configuring a full webtop

A full webtop allows your users to connect and disconnect from a network access connection, portal access resources, SAML resources, app tunnels, remote desktops, and administrator-defined links.
  1. On the Main tab, click Access Policy > Webtops.
  2. Click Create to create a new webtop.
  3. Type a name for the webtop you are creating.
  4. From the Type list, select Full.
  5. Click Finished.
The webtop is now configured, and appears in the list. You can edit the webtop further, or assign it to an access policy.
To use this webtop, it must be assigned to an access policy with a full resource assign action or with a webtop and links assign action. All resources assigned to the full webtop are displayed on the full webtop.

Creating a webtop link

You can create and customize links that you can assign to full webtops. In this context, links are defined applications and websites that appear on a webtop, and can be clicked to open a web page or application. You can customize these links with descriptions and icons.
  1. On the Main tab, click Access Policy > Webtops > Webtop Links.
  2. Click Create to create a new webtop link.
  3. In the Name field, type a name for the new webtop link.
  4. In the Application URI field, type the application URI.
  5. In the Caption field, type a descriptive caption. The Caption field is pre-populated with the text from the Name field.
  6. If you want to add a detailed description, type it in the Detailed Description field.
  7. To specify an icon image for the item on the webtop, click in the Image field and choose an image, or click the Browse button. Click the View/Hide link to show or hide the currently selected image.
  8. Click Finished.
The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.
Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either a full resource assign action or a webtop and links assign action.
Customizing a webtop link
You can customize links that you assign to full webtops.
  1. On the Main tab, click Access Policy > Webtops > Webtop Links.
  2. Click the name of the webtop link you want to customize. The properties screen for the webtop link appears.
  3. To change the description of the link, in the Description field, type a new description.
  4. To change the URI of the link, in the Application URI field, type the application URI.
  5. If you made changes on the properties screen, click Update.
  6. Click the Customization tab.
  7. Select the Language to customize, or click the Create button to create a new language customization.
  8. If you clicked Create to create a new language customization, from the Language list, select the language to customize.
  9. In the Caption field, type a descriptive caption.
  10. In the Detailed Description field, type a detailed description.
  11. In the Image field, click Browse to select an image to show on the webtop to represent the webtop link. Click the View/Hide link to show the currently assigned image. A webtop link image can be a GIF, BMP, JPG or PNG image up to 32 x 32 pixels in size.
  12. Click Finished.
The webtop link is now configured, and appears in the list, and on a full webtop assigned with the same action. You can edit the webtop link further, or assign it to an access policy.
Before you can use this webtop link, it must be assigned to an access policy with a full webtop, using either a full resource assign action or a webtop and links assign action.

Webtop properties

Use these properties to configure a webtop.

Property Value Description
Type Network Access, Portal Access, or Full
  • Use Network Access for a webtop to which you assign only a single network access resource.
  • Use Portal Access for a webtop to which you assign only portal access resources.
  • Use Full for a webtop to which you assign a single network access resource, multiple portal access resources, and multiple application access application tunnel resources, or any combination of the three types.
Portal Access Start URI URI Specifies the URI that the web application starts. For Full webtops, portal access resources are published on the webtop with the associated URI you define when you select the Publish on Webtop option.
Minimize to Tray Enabled or disabled If this check box is selected, the webtop is minimized to the system tray automatically after the network access connection starts. With a network access webtop, the webtop automatically minimizes to the tray. With a full webtop, the webtop minimizes to the system tray only after the network access connection is started.

Adding a webtop and webtop links to an access policy

Before you start this task, you must create an access profile.
Add the full resource assign action to an access policy to add a network access resource, portal access resources, application tunnel resources, and remote desktop resources to an access policy branch. You can also assign ACLs, webtops, and webtop links with the full resource assign action.
Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  1. On the Main tab, click Access Policy > Access Profiles. The Access Profiles List screen opens.
  2. Click the name of the access profile for which you want to edit the access policy. The Access Profile properties screen opens for the profile you want to edit.
  3. On the menu bar, click Access Policy. The Access Policy screen opens.
  4. Click Edit Access Policy for Profile profile_name. The visual policy editor opens the access policy in a separate screen.
  5. On an access policy branch, click the plus symbol (+) to add an item to the access policy.
  6. Select the Webtop and Links Assign agent, and click Add Item. The Webtop and Links Assignment screen opens.
  7. In the Name field, type a name for the access policy item. This name is displayed in the action field for the access policy.
  8. Next to the Webtop and Webtop Links links, click the Add/Delete link, and select the webtop and links to assign. You can only assign one webtop, though you can assign multiple webtop links.
  9. Click the Save button to save changes to the access policy item.
You can now configure further actions on the successful and fallback rule branches of this access policy item.
Click the Apply Access Policy link to apply and activate your changes to this access policy.

Adding full resources to an access policy

Before you start this task, you must have created an access profile.
You can add the full resource assign action to an access policy to add a network access resource, portal access resources, application tunnel resources, SAML resources, and remote desktop resources to an access policy branch. You can also assign ACLs, webtops, and webtop links with the full resource assign action.
Important: Do not assign a webtop for a portal access connection configured for minimal patching mode. This configuration does not work.
  1. On the Main tab, click Access Policy > Access Profiles. The Access Profiles List screen opens.
  2. Click the name of the access profile for which you want to edit the access policy. The Access Profile properties screen opens for the profile you want to edit.
  3. On the menu bar, click Access Policy. The Access Policy screen opens.
  4. Click Edit Access Policy for Profile profile_name. The visual policy editor opens the access policy in a separate screen.
  5. On an access policy branch, click the plus symbol (+) to add an item to the access policy.
  6. From the General Purpose list, select Full Resource Assign and click the Add Item button. The Full Resource Assign popup screen opens.
  7. In the Name field, type a name for the access policy item. This name is displayed in the action field for the access policy.
  8. Click the Add new entry button. A new resource line is added to the list.
  9. To assign resources, in the Expression area, click the Add/Delete link. The Resource Assignment popup screen opens.
  10. Assign resources to the access policy using the available tabs.
    Tab Description
    Static ACLs Allows you to select one or more ACLs defined on the system. Each ACL you select is assigned to the access policy branch on which this resource assign action operates.
    Network Access Allows you to select a single network access resource from the system. You can select only one network access resource. The network access resource you select is assigned to the access policy branch on which this resource assign action operates.
    Portal Access Allows you to select one or more portal access resources from the system. The portal access resources you select are assigned to the access policy branch on which this resource assign action operates.
    App Tunnel Allows you to select one or more application tunnel resources from the system. The application tunnel resources you select are assigned to the access policy branch on which this resource assign action operates.
    Remote Desktop Allows you to select one or more remote desktop (terminal server) resources from the system. The remote desktop resources you select are assigned to the access policy branch on which this resource assign action operates.
    SAML Allows you to select one or more SAML resources from the system. The SAML resources you select are assigned to the access policy branch on which this resource assign action operates. Select a full webtop to display SAML resources.
    Webtop Links Allows you to select links to pages and applications defined on the system to display on the full webtop. A full webtop must be assigned to display webtop links.
    Webtop Allows you to select a webtop from the system. The webtop resource you select is assigned to the access policy branch on which this resource assign action operates. You can select a webtop that matches the resource type, or a full webtop.
    Static Pool Allows you to dynamically assign a predefined LTM pool to a session. This value takes precedence over any existing assigned pool attached to the virtual server. The static pool you select is assigned to the access policy branch on which this resource assign action operates.
  11. Click the Save button to save changes to the access policy item.
You can now configure further actions on the successful and fallback rule branches of this access policy item.
Click the Apply Access Policy link to apply and activate your changes to this access policy.
Table of Contents   |   << Previous Chapter

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)