For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

m1825_265443's avatar
m1825_265443
Icon for Nimbostratus rankNimbostratus
Dec 05, 2016

F5 APM - Windows 10 Anniversary Update - IE 11

Hello!

 

We've been fighting an issue on the F5 APM for machines with the Windows 10 Anniversary Update and IE 11.

 

We are using the F5 APM as a front end portal to several applications. A user will authenticate past APM but when they try to open links to the other applications, they receive an "Access policy evaluate is already in progress for your current session".

 

This issue is only present when using IE. Chrome and Firefox do not have this issue.

 

Has anyone ran into this or have any recommendations on where to start looking?

 

Thanks! -Matt

 

application delivery
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Dec 05, 2016

    Can you please try the iRule referenced in this SOL and let us know if this solves your problem?

     

     

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Dec 06, 2016

    This irule should work around the issue with Windows 10 anniversary update and IE11:

    when ACCESS_SESSION_STARTED  {
    if { [HTTP::method] equals "GET" and ( [HTTP::path] ends_with ".ico" or [HTTP::path] ends_with ".ico?F5CH=I" ) and [HTTP::header
"User-Agent"] contains "Trident/7.0; rv:11.0" }{
        ACCESS::session remove
        HTTP::respond 404
    }
}