In a configuration that controls traffic and requests directed to your internal servers, using Access Policy Manager® (APM®) with Local Traffic Manager® provides additional security. APM communicates with backend web servers, forwarding requests from the client to web servers within a local traffic pool. APM allows access to the local traffic pool only after the user passes through an access policy that typically contains authentication actions, endpoint security checks, and ACLs.
Adding a per-request policy to this configuration introduces the ability to respond to each client request using a subset of per-request policy items.
This implementation is meant for APM and LTM™ configured in reverse proxy mode. Proxy mode is specified in the http profile associated with the virtual server.
Complete these tasks before you start:
The table specifies Secure Web Gateway (SWG) support for per-request policy items in an APM® and LTM®reverse proxy configuration.
|Per-request policy item||Supported with APM and LTM in reverse proxy|
|SSL Intercept Set||No|
|SSL Bypass Set||No|
|Application Filter Assign||No|
|Category Lookup||Yes, provided that the input type is not subject.cn|
|URL Filter Assign||Yes|
|Dynamic Date Time||Yes|
|AD Group Lookup||Yes|
|LDAP Group Lookup||Yes|
|LocalDB Group Lookup||Yes|
|RADIUS Class Lookup||Yes|
You associate a per-request policy with the virtual server so that, after the session is established, APM can apply it to URL requests as they are made.
Access Policy Manager® (APM®) web access management provides the ability to access web applications through a web browser without the use of tunnels or specific resources. With this type of access, APM communicates with backend web servers, forwarding requests from the client to web servers within a local traffic pool.
In a typical web access management connection, access occurs through a rewriting engine that rewrites links and URLs to and from the client. APM web access management eliminates the need for content rewriting, allowing access to the configured local traffic pool after the user passes through the access policy checks.
To support APM web access management connections, you need a pool of web application servers, an access profile and access policy, and a virtual server.
The web access management access type does not have a logout mechanism; as a result configuring a timeout is important. Access Policy Manager® (APM®) provides these options.