OWA2013 some requests breaking APM session

Question

Hi again,&nbsp;
it was hard to find useful words for the topic so let me explain my issue or lets say two issues:&nbsp;

When doing the logout from OWA, I'm issuing a redirect to the APM hangup URL when the logout URI is identified in the HTTP_REQUEST-event. This works fine and the APM session is also correctly deleted. But I identified that there is another automatic request issued (in the background) after this hangup-redirect towards the URI /owa/ev.owa2 (I guess this is related to the Enterprise Vault integration). But this request starts a new ASM session and when I click the link for a new session on the APM logout page, I'm always ending up with the error message:&nbsp;
The resource you are looking for is temporarily unavailable.&nbsp;
The cause may be an incomplete access policy evaluation. Please continue to finish your access policy in the previous browser window, and close this current window immediately.&nbsp;

Sometimes when I start a complete new session (even with a fresh browser window), I'm also ending up with the above mentioned error message. I found out that there are two different URIs also issued somehow in the background. At that time I'm also seeing for a short moment OWA trying to login and I'm wondering how the APM can be "bypassed" (is this some kind of caching misbehavior?). These two requests are also creating additional APM sessions and breaking the normal logon behavior:&nbsp;

/owa/sessiondata.ashx/owa/userspecificresourceinjector.ashx

Not sure if both issues have the same or at least similar root causes. I already tried to catch these three URIs within the ACCESS_SESSION_STARTED-event and delete the access session again. APM redirects then to the URI /owa/?bO=1 with the above mentioned error message and I tried to catch this again within the HTTP_REQUEST-event and redirect it back to /owa/ and deleting the MRHSession and LastMRH_Session cookie. But without success.&nbsp;
Has anybody an idea how to fix that or can point me in the right direction?&nbsp;
Thank you!&nbsp;
Ciao Stefan :)&nbsp;

kunjan · Answer

Have you tried making use of "Logout URI Timeout" which removes the session after a hold out period?&nbsp;

stefan_klotz · Answer

Hi Kunjan,&nbsp;
no I haven't specified a Logout URI at all. I'm just handling this via iRule. But even with the Logout URI specified (tested it before) it causes the same issue.&nbsp;
Ciao Stefan :)&nbsp;

stan_piron · Answer

I had the same behavior with IE and OWA 2013 and not with firefox&nbsp;
It appears that when the user request the default URL, IE request these URLs before the expected URL..
IE may have cache that this URL is a OWA 2013 and try to download these files before authentication form.&nbsp;
These request generate new session with wrong landinguri. &nbsp;
When the user request is sent by the browser, APM reply with the error page as it expect only logon URLS until session completed..&nbsp;
The only way was to drop these URLs in an irule...&nbsp;

stefan_klotz · Answer

Hi Stanislas,&nbsp;
can you please share the part of your iRule for this? I tried already something similar yesterday, but as you see without success.&nbsp;
Thank you!&nbsp;
Ciao Stefan :)&nbsp;

stan_piron · Answer

I did it on customer configuration and I didn't save it.&nbsp;
Sorry&nbsp;

Forum Discussion

Win Big in Vegas: The iRules Contest is back with $5k on the line at AppWorld 2026

Jürgen - February 2026 Featured Member

F5 Architecture Track Sessions - AppWorld 2026

Recent Discussions

Viprion End of Software Support (EoSS)

Restore configuration to GTM Sync Group device

Questions on device trust

BIG‑IQ: Adding rSeries/Velos Devices through the REST API

AppWorld DC Booth Kiosk Generator

Related Content

Breaking Down the Quantum Challenge: Why Post-Quantum Cryptography Can't Wait

Breaking Down the Quantum Challenge: TLS Cipher Suite Vulnerabilities and FIPS Post-Quantum Standards Explained

HTTP Request Smuggling Using Chunk Extensions (CVE-2025-55315)

Logging DNS Requests

EC certificate breaks remote desktop