AD Account Lockout

Hi

You should be able to achieve what you want with tables : https://clouddocs.f5.com/api/irules/table.html

You would just need to determine the decision algorithme.

You could for example :

• Create an entry in the table when a new session is started storing the username and mrh session
• When a new connexion is initiated, if an entry already exist, then drop the connexion
• When the APM session is established or completely denied, delete the entry in the table to avoid memory issues.

That's just an example.

Also another way using the default settings of APM policy :

• Max Sessions per User
• Max InProgress Session per Client IP.

It's less flexible than tables, but less devops also :)

Yoann