Forum Discussion
rafaelbn_176840
Altocumulus
Jan 09, 2018APM conditional policy
Hello devs! Happy 2018 guys!
We have an APM on our environment serving as VPN. The policy first authenticates the user against AD and after talks to a SMS device users can receive their two fact...
Daniel_Varela
Employee
Jan 09, 2018Rafael,
APM makes use of an special EVENT that is only triggered when the policy is evaluated and you have an irule event box. You need an irule more like this:
when ACCESS_POLICY_AGENT_EVENT {
if { [ACCESS::policy agent_id] eq "event_name_in_your_accesspolicy" } {
if {[active_members pool_SMS] > 1} {
ACCESS::session data set session.custom.sms_server 1
} else {
ACCESS::session data set session.custom.sms_server 0
}
}
}
I have not tested the irule but it should be something like that. Pay special attention to the agent_id in your policy as it must match. If everything is fine then you should see that variable when you execute sessiondump
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
