For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_E__Smith_'s avatar
David_E__Smith_
Icon for Nimbostratus rankNimbostratus
Jul 07, 2015

APM domains: How to switch based on user input?

As part of a project to migrate some users away from Microsoft ISA Server to F5 APM, I'm trying to replicate how a certain form works, to keep end-users from noticing and/or panicking. 🙂 The form...
BIG-IP Access Policy Manager (APM)
design
security
David_E__Smith's avatar
David_E__Smith
Icon for Nimbostratus rankNimbostratus
Jul 07, 2015

That's certainly surprising. Since username and password are form variables that can be changed (if you mistype your password, for instance), I'd certainly expect to be able to change other inputs too. But if I can't, so be it...

Thoughts/comments on something like this as a workaround? This is intended to terminate the existing session, then bounce the user back to whatever page they originally requested (which should implicitly start a new session).

when ACL_ACCESS_DENIED {
  ACCESS::session remove
  HTTP::redirect [HTTP::uri]
}