Lockout Policy APM

On second consideration I realised that my example wasn't working as expected, I changed the iRule to this instead:

when ACCESS_POLICY_AGENT_EVENT {
   if { [ACCESS::policy agent_id] eq "failed_logon" }{
      table set [IP::client_addr] 100 300
   }
}
when HTTP_REQUEST {
   if { !([table lookup -notouch [IP::client_addr]] eq "")}{
      reject
   }
}

Now it works as I expected, and this also means you can remove the first iRule Event from the Policy. Or ignore create it as it were.