F5 APM ACCESS::session remove

While this works great for our Exchange 2010 / APM deployment, I just noticed that the browser must hold on to a cookie.

 

 

Even though user A clicks the logoff/signout in the OWA Session, they are successfully redirected to the APM Logoff page, and the APM session is killed. The issue we have is that the APM Logoff page has a hyperlink to start a new session. If clicked, they are redirected to the main APM Logon page. If user B comes along and logs on, they are logged into OWA as user A. APM shows user B as logged on and the IIS Logs shows MRHSession with the new APM session. The issue though is the "OutlookSession=" value in the cookie has the same value as user A.

 

 

The only way I know of getting around this right now is to inform our user population to close the browsers after logout. This seems to remove the cached cookie containing the old OutlookSession value.

 

 

Any thoughts? Can we use an iRule to force a delete of the browser side cookie, or better yet to remove the OutlookSession= value?