Workspot Configuration Guide for F5 BIG-IP Access Policy Manager

Workspot, Inc. 11/2/2015

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 1 of 8

F5 BIG-IP and Workspot Overview The F5 BIG-IP Access Policy Manager (APM) provides secure and scalable connectivity for your network.

Once the F5 BIG-IP is installed, Workspot can be quickly and easily implemented as no additional on-

premise hardware or software required. The Workspot client connects to the F5 BIG-IP APM and access

internal corporate resources using Mobile AppTunnels feature.

For more information on the F5 BIG-IP APM see: http://www.f5.com/products/big-ip/big-ip-access-policy-manager/overview/ The Workspot client runs on laptops, desktops, iOS and Android devices. Workspot Control is the

corresponding, cloud-based administration console used to manage configuration and policies for the

environment.

For more information on Workspot, see: http://www.workspot.com The information and screens in this guide are based on the following:

F5 BIG-IP Virtual Edition

Version: 11.6.0 (Build 0.0.401)

Prerequisites and Configuration Notes The following are general prerequisites for this guide:

The F5 BIG-IP should be installed and configured for network connectivity and basic operations, routing, DNS and including an AAA Server Group with an authentication server such as Microsoft Active Directory (AD).

Administrator login for the F5 BIG-IP.

Hostname or IP address for an internal web page if the Portal Access Setup Wizard is used for the setup.

Hostnames or IP addresses for internal web apps, CIFS file shares and Remote Desktop Services (RDS) servers.

Configuring the BIG-IP APM for Workspot involves the following steps:

Create an AAA Server (if needed)

Using the Portal Access Setup Wizard

Enable the Application Tunnel

Testing the configuration with a browser

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 2 of 8

F5 BIG-IP APM Configuration for Workspot

The following steps outline the basic configuration of the BIG-IP APM to support Workspot. Sign into the

administration portal of F5 BIG-IP and configure a webtop as follows.

1. From Main > Access Policy > AAA Server select and verify the AAA server used for authentication, for example the Active Directory type as shown below, or create a new AAA Server if needed.

2. If an existing virtual server is already configured and can be reused for Workspot, select that server from Main > Local Traffic > Virtual Servers and go to enable the Application Tunnel (Step 9). Otherwise, go to Main > Wizards > Device Wizards and select Portal Access Setup Wizard, then click Next.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 3 of 8

3. Enter the Policy Name Workspot, leave the caption also as Workspot, then uncheck the Enable Antivirus Check in Access Policy, then click Next.

4. Select the Use Existing authentication and choose an existing AAA server from the dropdown, then click Next.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 4 of 8

5. Select Application Custom and enter the Hostname or IP address for an internal web page, for example http://10.20.20.20/. This page will only be used to test the portal. Uncheck the Configure

SSO option and then click Next.

6. Enter the Virtual Server IP Address and click Next.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 5 of 8

7. Review the configuration and then click Next.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 6 of 8

8. On the summary screen click on the Virtual Server Workspot_vs. Or if a previously configured virtual server is to be used for Workspot, select that server from Main > Local Traffic > Virtual Servers.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 7 of 8

9. Under the virtual server Access Policy, select the Application Tunnels (Java & Per App VPN) then click Update.

This document contains Workspot, Inc. proprietary information and is not to be disclosed to unauthorized persons. Version 2.1 pg. 8 of 8

Testing the configuration

To test the configuration, using a standard browser, go to the virtual server address, e.g.

https://bigip.mycompany.com/. Then enter the appropriate credentials and click Logon.

The internal web page from the website http://10.20.20.20/ (configured in step #5) will be displayed.