For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Martin_Robbins's avatar
Martin_Robbins
Icon for Nimbostratus rankNimbostratus
May 12, 2014

APM sign out using Outlook web app 2013

Hello,

 

In older versions of outlook we have intercepted the Log Out/Sign Out call to also close the APM session for the user in Outlook Webmail.

 

With Outlook 2013 the Sign out option just causes a pop-up to the user saying

 

sign out

 

You must close all browser windows to sign out completely

 

OK

 

Which is not true as we have enabled persistent cookies ...

 

Any ideas on how to handle this to close the users APM session ?

 

thanks

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
security
TMOS

2 Replies

  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    May 12, 2014

    See if the following iRule helps in place of the one configured on the GUI, which also cannot specify a wild char for SignOut.aspx URL.

    when HTTP_REQUEST {
   if {[HTTP::uri] contains "SignOut.aspx" } {
      set KO 1
   }
}

when CLIENT_CLOSED {
   if {[info exists KO]} { 
       ACCESS::session remove
      unset KO
   }
}
  • Martin_Robbins's avatar
    Martin_Robbins
    Icon for Nimbostratus rankNimbostratus
    May 13, 2014

    Hi,

     

    We use something very similar for the older Outlook installations. The problem with Outlook 2013 is that it is not make ANY call to /SignOut.aspx

     

    All that happens when the user clicks the 'sign out' option is they get a JavaScript pop-up and no URL is called.

     

    With this pop-up and no URL being called, we are not sure how to trigger the log out ...

     

    cheers