APM HTTP sessionless support for web services

We have been asked the same question at my company and we told them we would not create some hacked up, Frankenstein APM for them because no one would be able to support it. I really like having vacations so even though I could write an iRule to do that, I would be the only who could support it. Chances are that you would be in the same predicament.

If you need to protect web services I would suggest limiting firewall access to the client IPs, client cert authentication via the LTM or telling the developer to write a secure app. You would enjoy your time off much more if you did.