F5 APM EMAIL Alert : failed VPN connection

Hi,

Create a macro to send the email. In the body use %{custom.session.failure} to show the message.
In your main policy insert a variable assign after every failure branch. Variable is custom.session.failure, Text is "error message for the failure"
So for Certificate check, after the failed branch the custom.session.failure text will be: Certificate Check Failed.

Insert the send email macro after every variable assign (failed branch).

I have a question, how do you know the email address of a user if any of the test fail before you get their email address via AD Auth or Certiciate check?

Cheers, 
Kees