K12749: Support for Using the BIG-IP Edge Client to Check Identifying Information from Apple Ios Client Devices

K12749: Support for using the BIG-IP Edge Client to check identifying information from Apple iOS client devices

Non-Diagnostic

Original Publication Date: Mar 15, 2016

Update Date: Feb 16, 2018

Topic

F5 Product Development has added support to the BIG-IP Edge Client application for Apple iOS to check unique identifying information from an Apple iOS client device. This feature uses session variables that are populated with the Apple iOS client device information. This information allows the FirePass controller and BIG-IP APM system to perform pre-logon sequence checks and perform actions based on information about the connecting device. With this information, the system can do such things as:

Assign a master group based on model information Deny access if the Apple iOS version is less than the required level Deny access if the Apple iOS device is a jailbreak device Log client type, host name, and UDID address information

The following table lists the session variables that collect Apple iOS device specific information.

Edge Client 2.0.0 and later iOS session variables

Session Variable Name Description session.client.type Contains the client type, such as Standalone session.client.hostname Contains the client hostname session.client.jailbreak Contains the jailbreak status of the iOS device session.client.model Contains the model of the device. The returned model information is iPhone, iPad, or iPod touch session.client.platform_version Contains the iOS version of the device *session.client.device_passcode_set Contains the passcode status of the iOS device session.client.unique_id Contains the UDID* of the iOS device

Note: Session variable available in the BIG-IP Edge Client 2.0.7 release.

Edge Client 1.0.2 iOS session variables

Session Variable Name Description session.client.type Contains the client type, such as Standalone session.client.jailbreak Contains the jailbreak status of the iOS device Contains the model of the device. The returned model information is iPhone, session.client.model iPad, or iPod touch session.client. Contains the iOS version of the device platform_version session.client.unique_id Contains the UDID* of the iOS device

Edge Client 1.0.1 iOS session variables

Session Variable Name Description session.client.type Contains the client type, such as Standalone Contains the model of the device. The returned model information is iPhone, session.agent_info.model iPad, or iPod touch session.agent_info. Contains the iOS version of the device platform_version session.agent_info. Contains the UDID* of the iOS device unique_id

*For more information about finding the device UDID, refer to the Find the serial number and other information for your iPhone, iPad, and iPod touch Apple document.

Note: This link takes you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge.

Supplemental Information

K13731: Overview of session variable support for BIG-IP Edge Client for Android devices The BIG-IP APM and BIG-IP Edge Client for iOS guide The Configuration Guide for BIG-IP Access Policy Manager The FirePass Controller and BIG-IP Edge Client for iOS guide The FirePass Controller Administrator Guide

Note: For information about how to locate F5 product guides, refer to K12453464: Finding product documentation on AskF5.

Applies to:

Product: BIG-IP, BIG-IP APM, BIG-IP Edge Gateway 12.0.0, 11.6.1, 11.6.0, 11.5.4, 11.5.3, 11.5.2, 11.5.1, 11.5.0, 11.4.1, 11.4.0, 11.3.0, 11.2.1, 11.2.0, 11.1.0, 11.0.0, 10.2.4, 10.2.3, 10.2.2, 10.2.1, 10.2.0, 10.1.0

Product: Legacy Products, FirePass 7.0.0, 6.1.0