end APM session on browser close

Does the application have a logout URI? You can add the URI to APM which can use that to tell it to kill the persistent cookie.

The following is an example that injects javascript into the page using a stream profile, looks for a browser close in IE and transparently redirects the page to the signout page, telling APM to kill the session.

This specific example was developed for SharePoint, but could work for anything really, just change the URI around to suit your needs.

when HTTP_REQUEST {

        Looks for SharePoint hangup, kills APM session.
        if { [string tolower [HTTP::uri]] contains "signout.aspx"} {
            ACCESS::session remove
        }
        STREAM::disable
        HTTP::header remove "Accept-Encoding"
    } 
    when HTTP_RESPONSE {
         Check if response type is text
        if { [HTTP::header value Content-Type] contains "text" } {

             Define the stream replacement
             Change the 15 in the following line to the version of sharepoint being used 13 = 2007 / 14 = 2010 / 15 = 2013
            STREAM::expression {@@ @}
            STREAM::enable
        }
    }