Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Squeak's avatar
Squeak
Icon for Cirrus rankCirrus
Oct 08, 2019

Irule to match two APM variables

I need some help with an Irule that should have this logic, The attribute "samlattr" must match the value "employeeID" if there are a match the VPE should continue. If there are no match, the sess...
application delivery
BIG-IP Access Policy Manager (APM)
irules
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Oct 08, 2019

Hi Squeak,

Can you test this?

when ACCESS_POLICY_AGENT_EVENT {
	set samlattr [ACCESS::session data get "session.saml.last.attr.name.xyz"]
	set employeeID [ACCESS::session data get "session.ldap.last.attr.employeeID"]
	
	if { $samlattr ne $employeeID } {
		discard
	}
}