For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Sep 25, 2018

Chrome prefetch breaks APM sessions?

Hi,   We use Big-IP APM as a SAML SP for Shibboleth IdP. Our APM Policy is nothing too fancy. It's a multi-domain SSO.   The problem: we see a lot of /my.logout.php3?errorcode=21 in /var/log/lt...
BIG-IP Access Policy Manager (APM)
devops
saml
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Sep 25, 2018

You can try this code:

 

when ACCESS_SESSION_STARTED {
    if {[HTTP::header Purpose] equals "prefetch"} {
        ACCESS::respond 403 -version "1.1" noserver "Connection" "Close"
        ACCESS::session remove
        return
    }
}

it will drop new session if the Purpose header value is prefetch