For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dev_56330's avatar
Dev_56330
Icon for Cirrus rankCirrus
Aug 15, 2017

APM Session Timeout, Requires Constant Browser Refresh

I am looking for a solution where after a APM session times out, the page is sent to a new logon screen rather than the typical session timeout splash screen. Anyone have a solution?  
application delivery
BIG-IP Access Policy Manager (APM)
iRules
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Aug 17, 2017

Hi,

You can write a custom peace of javascript code that you insert in the advanced customisation of your Access profile.

Or you can just override the javascript used to generate the splash screen when the session timed out by using an irule that intercept the request to the js object and respond with your own javascript that redirect the user to the login page.

You have a third solution. If I remember correctly, the splash screen is triggered when the browser receive a 404 status code in a response to a request to the timeout agent.

The javascript used to generate the splash screen may be /public/include/js/session_check.js

The request made to the timeout agent is : /vdesk/timeoutagent-i.php

Hope it helps

Yann

  • Dev_56330's avatar
    Dev_56330
    Icon for Cirrus rankCirrus
    Aug 18, 2017

    Thanks Yann. Was really hoping I wasn't the only one who has ever run into this and had already developed confirmed functioning iRule to redirect to logon page.

     

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Aug 23, 2017

    Hi,

    You can modify the following content within "session_check.js".

     

        //============================================================
        // Show timeout splash layer
        //============================================================
        showSplashLayer: function(elementId, customizedText){
            var d = document.getElementById(elementId);
            if (d != null) {
                try {
                    d.className = 'inspectionHostDIVBig';
                    customizedText = customizedText.replace(/\[SESSION_RESTART_URL\]/g, this.landingUri);
                    d.innerHTML = customizedText;
                    var b = document.getElementsByTagName("body");
                    if (b != null) {
                        this.disableAllElements(b[0], d);
                    }
                }
                catch (e) {}
            }

     

    It's not 100% supported, but you can modify that file through SSH acccess. I usually run a find command to retrieve the path of the file and then I modify the content.

    Alternatively, you can copy the content of that file and insert the modified content using an irule with ifile or hosted content