Forum Discussion

oloncle_125804's avatar
oloncle_125804
Icon for Nimbostratus rankNimbostratus
Apr 23, 2013

APM - App Tunnel - Not working

 

Hello Everyone,

 

 

I play with APM since couple of days to evaluate the product. I successfully built an access profiles with AD Auth, AD Query group and rdp-network access resources. Now I try to redirect my tests on intranet website using APP-Tunnel. For my understanding, app tunnel redirect the trafic to the destination server. Is it correct or I'm wrong ?

 

That's why I created an app tunnel forwarding all tcp trafic on port http to my internal intranet web server. When I launch the tunnel shortcut from the webtop the auto launch try to access the web server with my browser (http://192.168.1.2) but without success :( .

 

The documentation specifies that we have to use a virtual server (as a reverse proxy) !? Is that really the only way to publish a web application tunnel ? I've got experiences with other VPN SSL solutions and we can run both modes, as a reverse proxy or as a direct tunnel.

 

The APM VE Appliance is installed in a specific DMZ with one interface in the DMZ and one management interface in the LAN.

 

What's wrong with my configuration ?

 

help will be appreciate.

 

thank you in advance

 

APM
remote access
security

4 Replies

Sort By
  • oloncle_125804's avatar
    oloncle_125804
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2013
    Thanks for your answer. I suppose you mean "Portal Access" in the webgui. I tried to configure a web application publication I got "You do not have permission to view this page." when the page is loaded. I also checked my acl and resource, they seem correct .

     

    Do you have an idea ?

     

     

    thanks
  • Laudec's avatar
    Laudec
    Icon for Nimbostratus rankNimbostratus
    Feb 24, 2015

    Hi, I know this answer is a few years too late...but what we have learned from App Tunnels is that the computer you are launching the app tunnel, should have change rights to the hosts file, as the app tunnel creates a temporary static entry, for the application host name, to point to a local loop back IP. If it cannot make the hosts file change, the traffic will fail over the tunnel.

     

  • Sec-Enabled_658's avatar
    Sec-Enabled_658
    Icon for Cirrostratus rankCirrostratus
    Mar 05, 2015

    I am using app tunnel which creates the loopback via a webtop and also using the edge client for DNS relay service to point my DNS name to loopback 127.0.0.5. The problem I am seeing is that once the traffic goes through the app tunnel, its not being SNATed. Is that expected behavior?