custom monitoring

Hey Angelo. It could be but that depends on the authentication method. If it's a forms based login then it's not possible (I don't think) but if it's HTTP Auth or NTLM then it's possible.

it's form based login. i confirmed with the web developer..

A form-based login is usually just a POST method with a urlencoded payload:

 

 

==================

 

POST /index.php HTTP/1.1

 

Host: www.example.com

 

 

 

username=bob&password=mypassword

 

==================

 

 

Which equates to this single line string:

 

POST /index.php HTTP/1.1\r\nHost: www.example.com\r\n\r\n\r\nusername=bob&password=mypassword

 

 

The trick then is to figure out how your login page works and if there are subsequent messages after a successful login. If you capture the server side HTTP dialog you should see all of this. Then it's relatively simple to craft a cURL script in an external monitor, or if the login is simple, directly in the HTTP monitor in the GUI.

 

 

Thanks Kevin. I'll note that for the future! Cheers

That shouldn't matter.

If you're re-encrypting to the back end server, you should have a server SSL profile applied to the virtual server. The underlying HTTP dialog won't change though.

Posted By What Lies Beneath on 02/01/2013 07:44 AM

 

That shouldn't matter.

It might matter - depends on the monitor config.

 

 

Arie, as long as the appropriate monitor (http or https) is configured what's the difference?