For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jun 23, 2015

If you reduce the idle timeout on access policy to 10 seconds, user accessing to another ressource is not allowed to access ADFS server anymore.

 

If you ADFS connections are identified as LTM+APM, they not hit CCU limit but Access Session limit.

 

Connections coming from Microsoft must be ActiveSync connection as ActiveSync is not ADFS compliant. microsoft act as client of ADFS to check authentication. If you have the list of IP adresses of Microsoft servers, create a variable assign to change value of session.inactivity_timeout variable based on source address.