For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nimo_3485's avatar
Nimo_3485
Icon for Nimbostratus rankNimbostratus
Jul 01, 2014

Apm Sessions With multiple landing URI's

Hi,   I have apm configured on one of our virtual servers. When user accessing certain URI's he is presented with an apm logon page, depending on the URI. I used the action "Landing URI" and for e...
BIG-IP Access Policy Manager (APM)
design
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 01, 2014

The short answer is that it doesn't work that way. Once an access policy has reach an ending branch, it will not start over or re-evaluate any of the policy. You would either need to invalidate the existing session and have the user start over from scratch, or if you need to maintain information from the previous session, then an iRule technique I call "privilege escalation":

 

https://devcentral.f5.com/questions/apm-different-authentication-level-for-different-uri