Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 24, 2015
Solved

APM logout issue [resolved]

I have an APM deployment that is working flawlessly except for the logout page. It is an SSL-VPN access policy. Whenever we logout the logout page that appears next fails to load at all. Then after a...
BIG-IP Access Policy Manager (APM)
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Oct 26, 2015

    Glad it's sorted.

     

    APM has two ways to deal with this situation:

     

    1. There is a Windows System Service called "DNS Relay Proxy" that we (optionally) install as part of Edge Client when you run the fat installer. This guy will intercept the DNS requests to the vpn endpoint hostname and resolve it to the same IP as it originally used before the VPN was established.
    2. If DNS Relay Proxy is not installed, Edge Client will attempt to insert a host entry for the vpn endpoint hostname to the original IP. This only works if the user has privs to do it.

    If neither of those things are applicable, there isn't really much else it can do to help.

     

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Oct 26, 2015

Glad it's sorted.

 

APM has two ways to deal with this situation:

 

  1. There is a Windows System Service called "DNS Relay Proxy" that we (optionally) install as part of Edge Client when you run the fat installer. This guy will intercept the DNS requests to the vpn endpoint hostname and resolve it to the same IP as it originally used before the VPN was established.
  2. If DNS Relay Proxy is not installed, Edge Client will attempt to insert a host entry for the vpn endpoint hostname to the original IP. This only works if the user has privs to do it.

If neither of those things are applicable, there isn't really much else it can do to help.