For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

samdlee_305622's avatar
samdlee_305622
Icon for Nimbostratus rankNimbostratus
May 07, 2019

Complex session management

Hi,   Assume that my company provides many login methods with different authentication level and user goes to https://www.mycompany.com/apm-enabled-auth1-url, the APM evaluations is started and on...
BIG-IP Access Policy Manager (APM)
security
Rene_C_'s avatar
Rene_C_
Icon for Nimbostratus rankNimbostratus
May 08, 2019

Not sure if it helps, but you could try switching your access policy scopes to "virtual" instead of "global", then the session (and the according cookies) should only be valid for the virtual you are currently on.

 

Cheers,

 

Rene