For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JP_135500's avatar
JP_135500
Icon for Nimbostratus rankNimbostratus
Jul 16, 2014

Chrome persisting APM session on browser close when apps/extensions are allowed to run after Chrome closes

We are experiencing an issue with Chrome (35+ at least) where the user's session persists even after Chrome is closed and the computer is restarted. I'm not seeing this issue in Firefox, Opera, Safar...
BIG-IP Access Policy Manager (APM)
deployment
security
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Jul 31, 2014

It seems that this option keeps cookies alive even if the browser is closed ? could you check it by running a client side trace with dev tools on chrome to check if next open browser session is automatically sending APM cookies ?

 

when you talk about appropriate logout sequence do you mean that you have a logout uri for your application ?

 

in such case you could try to force APM session delete with some irules :

 

https://devcentral.f5.com/wiki/iRules.ACCESS__session.ashx