create cookie on ssl vpn session

I have not tried this, but you could attempt the following:

1. Add some javascript in your webtop customization to request a specific resource from the APM.
2. Code for that URI in an iRule and respond with a Set-cookie. You could add further validation to ensure that the Set-Cookie is done only when the APM policy eval was an Allow.

I will try it out if I get a chance.

Best !!