For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Mar 17, 2015

Proper place of ACCESS::session remove

When in the context of ACCESS_POLICY_COMPLETED event, where is the proper place to use ACCESS::session remove

ACCESS::respond 200 content $body Content-Type "text/xml;charset=ISO-8859-1" Connection close
ACCESS::session remove

OR

ACCESS::session remove
ACCESS::respond 200 content $body Content-Type "text/xml;charset=ISO-8859-1" Connection close
application delivery
BIG-IP Access Policy Manager (APM)
design
devops
iRules
security

1 Reply

  • Michael_Jenkins's avatar
    Michael_Jenkins
    Icon for Cirrostratus rankCirrostratus
    Mar 18, 2015

    I don't think it should matter in your case, since both commands will be executed. If it were me, I'd do the 

    ACCESS::session remove
    first, and then the 
    ACCESS::respond
    , followed by a 
    return
    (unless that's the end of your iRule).