Forum Discussion

ekaleido's avatar
ekaleido
Icon for Cirrus rankCirrus
Oct 06, 2015

APM and Network Access Based on user's OU

I have several hundred clients who connect via SSLVPN and authenticate against a client AD domain. I need to apply access policy to each user based on their OU?   For example, username "Bruce.Lero...
BIG-IP Access Policy Manager (APM)
deployment
security
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Oct 06, 2015

After authentication add an AD query and create branch rules based on the 

expr { [mcget {session.ad.last.attr.ou}] contains "CN=MY_OU, DC=MY_DOMAIN" }
.