For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rise_77519's avatar
Rise_77519
Icon for Nimbostratus rankNimbostratus
Aug 03, 2015

schedule user access on the apm

Hi, Is it possible to set a schedule time on the APM? I would like to do that users only access internal resource for a spesific time. Thanks,  
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 04, 2015

or assign to variable session.max_session_timeout the following expression:

set endhour 17;
set endmin 00;
set starthour [clock format [mcget {session.user.starttime}] -format %H];
set startmin [clock format [mcget {session.user.starttime}] -format %M]; 
return [expr {( $endhour * 3600 ) + ( $endmin * 60 ) - ( $starthour * 3600 ) - ( $startmin * 60 )}]
Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Apr 08, 2020

Do you happen to know if this assignment must occur within the VPE (before the session transitions to allow)? Or is ACCESS_POLICY_COMPLETED safe?

 

I assume that the timeout is enforced in tmm (not apmd) so it shouldn't matter.

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Apr 08, 2020

    Hi Walter,

     

    This code is to be used in VPE variable assign box. The optimized code is:

     

    expr { [clock scan "17:00"] - [mcget {session.user.starttime}] }

    You can find more examples of variable assign expressions here

  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Apr 08, 2020

    Thanks, I've confirmed that this must be set prior to Allow ending. Either thru VPE or ACCESS_POLICY_AGENT_EVENT if you already have iRules setup.