Forum Discussion

David_G__33241's avatar
David_G__33241
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

APM with missing User-Agent header

Is it normal that the Access Policy does not execute when there is no User-Agent header? I am trying to configure a Video Unit to connect in through a Big-IP however I see only the following in the APM log:

e1c55625: User-Agent header is absent or empty
e1c55625: New session from client IP x.x.x.x at VIP y.y.y.y Listener xxx_virtual (Reputation=Unknown)
e1c55625: Session deleted due to user inactivity.
e1c55625: Session statistics - bytes in: 0, bytes out: 0

The device is configured to connect to an IP address and a specific URI. I am trying to bring this in through APM so that I can use an Access Policy to lock down the device by source IP and/or certificate and/or URI, etc... The problem is that the Access Policy does not kick in at all whereas it works fine for anyone using a browser, Edge Client, etc. The only difference I see is the lack of User-Agent header.

Is there a workaround for this?

APM 12.1.2

3 Replies

  • The solution was to set clientless mode - problem solved.

    when HTTP_REQUEST { HTTP::header insert "clientless-mode" 1 }
    
  • e1c55625: New session from client IP x.x.x.x at VIP y.y.y.y Listener xxx_virtual (Reputation=Unknown)

     

    From the above event, I have a doubt.

     

    What is meant by Client IP & VIP ?

     

    Client IP -> Destination IP && VIP -> Source IP

     

    Please clarify my doubt.

     

    Thanks in advance.

     

    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP

      better to ask a new question then jump on an old one.

       

      Client IP is the IP address of the client that connects to the BIG-IP, the VIP IP address is the virtual server on BIG-IP.