For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dubdub's avatar
dubdub
Icon for Nimbostratus rankNimbostratus
Oct 12, 2017

APM session status remains pending after policy completion

Environment: 12.1.1 HF2

 

I have an APM policy that is working fine to authenticate my users against my local ActiveDirectory store. Yesterday I modified the policy ending for the successful path to use the "Redirect" ending to drop my users to a specific page, instead of the previous "Allow" ending. I've noticed that now when I check the list of active sessions, they all remain in Pending status after policy completion instead of Established.

 

The only difference I can see in the APM log with regards to the different behavior is that the Access policy result is set to "Redirect_Allow" instead of "LTM+APM_Mode" like it used to be. Is this expected behavior for the status of the session in APM with a redirect ending? Are there risks to letting the sessions remain in Pending status?

 

Thanks, Jen

 

application delivery
BIG-IP Access Policy Manager (APM)

1 Reply

  • dubdub's avatar
    dubdub
    Icon for Nimbostratus rankNimbostratus
    Oct 13, 2017

    I reverted to using the "Allow" ending on my policy and added this handling in my iRule:

    when ACCESS_POLICY_COMPLETED {
    if { [ACCESS::policy result] eq "allow" } {
       ACCESS::respond 302 Location /a/b/c
    }
}

    That keeps my sessions in the expected "Established" mode and achieves the same end result.