how to support both SSL ID and SourceIP persistant using for BIGIP LB firepass?

Thanks. In case, we use bigip to loadbalance FP , We prefer to use ssl ID to do persistant. But since IE 6.0 , microsoft allow the browser use new ssl ID to connect to the server especially when popup new browser windows, that cause our ssl ID persistant couldn't work .

 

So, we just can use source address persistant to do FP loadbalance.But this cause big trouble for the client, especially the adsl line is not stable . Each time ,the adsl reconnected, the client need to re-login to the ssl vpn ( if they use RSA,it's more trouble), and this is important for the gas-station POS machine user.If just one FP, our FP can still work though the client change the IP but the ssl ID is the same. But using our bigip loadbalance FP , we lost FP advantage.That's why I need this irule to support two persistant combine together.

 

Remember, I don't think this will cause trouble, since SSL ID is perfer and source IP is backup choice.