For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stan_Ward's avatar
Stan_Ward
Icon for Altocumulus rankAltocumulus
Feb 02, 2018

Divert first web request after policy allow to a URI

I have a garden-variety webtop with a handful of portals on it. But we have a requirement that the user that authenticated must have accepted our site's most recent terms and conditions before conti...
application delivery
BIG-IP Access Policy Manager (APM)
security
Daniel_Varela's avatar
Daniel_Varela
Icon for Employee rankEmployee
Feb 02, 2018

Why don't you try to use an AAA HTTP to send the request to the webserver and do all the checks? You just have to check the response back from the web server and show the message with the terms based on that. You can use a decision message box to finish the session if the user doesn't agree. You can use another AAA HTTP to confirm that the user accepted the terms.

 

If that webserver is able to receive a POST message with the information you have from the customer, this should do the work.

 

Another option is to use an irule with sideband connections.