For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

matbel_119218's avatar
matbel_119218
Icon for Nimbostratus rankNimbostratus
Nov 11, 2013
Solved

APM 11.4.0 registry check with session variable

Hi Guys, I try use session variable in registry check, but it doesn't work. Example: "HKEY_LOCAL_MACHINE64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"."DefaultUserName" = session.logon.la...
BIG-IP Access Policy Manager (APM)
design
microsoft
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Nov 11, 2013

    Unfortunately it's not possible to use session variables in the Registry Check. We encourage support tickets with enhancement requests though, please send one in. I was not able to locate an existing request for this feature, surprisingly.

     

    EDIT: Starting with 12.1 this feature is added to get a value from the registry and store it as a session variable. There are restrictions because it has potential security implications. See the following for more information:

     

    https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-visual-policy-editor-12-1-0/9.html

     

Matt_Dierick's avatar
Matt_Dierick
Icon for Employee rankEmployee
Nov 11, 2013

I would try :

 

"HKEY_LOCAL_MACHINE64\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon"."DefaultUserName" = %{session.logon.last.username}