Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Tham_T__330907's avatar
Tham_T__330907
Icon for Nimbostratus rankNimbostratus
Nov 12, 2017

F5 APM Limit max user per session

Currently, F5 running on APM with SSL VPN function. How is it possible if I want to set the max session per user to "1".   The Access Profile setting allow me only ... for example scenario of F5 U...
BIG-IP Access Policy Manager (APM)
security
session
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Nov 14, 2017

you can try this irule (not tested)

when ACCESS_POLICY_COMPLETED {
    set max_concurrent_sessions [PROFILE::access max_concurrent_sessions]
    set apm_uuid "[PROFILE::access name].[ACCESS::session data get session.logon.last.username]"
    if {$max_concurrent_sessions > 0 && [set apm_cookie_list [ ACCESS::uuid getsid $apm_uuid ]] >= $max_concurrent_sessions} {
        ACCESS::respond 302 noserver Location "/vdesk/hangup.php3"
    }

}