Forum Discussion

Tham_T__330907's avatar
Tham_T__330907
Icon for Nimbostratus rankNimbostratus
Nov 13, 2017

F5 APM Limit max user per session

Currently, F5 running on APM with SSL VPN function. How is it possible if I want to set the max session per user to "1".

 

The Access Profile setting allow me only ... for example scenario of F5 USER A login to PC1 - > Passed USER A login to PC2 - > Passed and terminate the session on PC1

 

But it's not my desire, I want the scenario like USER A login to PC1 - > Passed USER A login to PC2 - > Cannot Login

 

Are there any solution that can config it, or I have to use iRules to detect it.

 

Thanks

 

BIG-IP Access Policy Manager (APM)
security
session
  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Nov 14, 2017

    you can try this irule (not tested)

    when ACCESS_POLICY_COMPLETED {
    set max_concurrent_sessions [PROFILE::access max_concurrent_sessions]
    set apm_uuid "[PROFILE::access name].[ACCESS::session data get session.logon.last.username]"
    if {$max_concurrent_sessions > 0 && [set apm_cookie_list [ ACCESS::uuid getsid $apm_uuid ]] >= $max_concurrent_sessions} {
        ACCESS::respond 302 noserver Location "/vdesk/hangup.php3"
    }

    }