For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

John_Alam_45640's avatar
John_Alam_45640
Historic F5 Account
Mar 12, 2014

try inserting "*/SingOut.aspx" in the logout URI, just for the heck of it. see if it works. The "*" used to work at the end of the Start URI field.

Otherwise, the HTTP_REQUEST event should catch the URI and kill the session:

when HTTP_REQUEST {
   if { [HTTP::path] ends_with "SingOut.aspx"} {
       ACCESS::session remove
       return
      }
}