For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Squeak's avatar
Squeak
Icon for Cirrus rankCirrus
Oct 08, 2019

Irule to match two APM variables

I need some help with an Irule that should have this logic, The attribute "samlattr" must match the value "employeeID" if there are a match the VPE should continue. If there are no match, the sess...
application delivery
BIG-IP Access Policy Manager (APM)
iRules
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Oct 08, 2019

Hi,

 

You don't need an Irule for this need instead using an Irule event.

 

I advise you to use APM (Empty box)

 

1- create an empty box

2- Add a branch rules

3 create an advanced expression

 

And enjoy.

 

  • Squeak's avatar
    Squeak
    Icon for Cirrus rankCirrus
    Oct 09, 2019

    Thanks youssef,

    ​

    I´ll give your solution a try, :)

  • Squeak's avatar
    Squeak
    Icon for Cirrus rankCirrus
    Oct 17, 2019

    youssef

    ​

    I tried your solution and most of it worked but if the variable "session.ldap.last.attr.employeeID" are empty the session continues to the next block. The logic should be, if the variable "session.ldap.last.attr.employeeID" matches "session.saml.last.attr.name.xyz" everything are okay but if they don´t match or the variable are empty the APM should discard the session.

    ​

    ​