For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Renato_166638's avatar
Renato_166638
Icon for Nimbostratus rankNimbostratus
Sep 01, 2017

Secure Variable in request body of an HTTP AAA server in APM

Hi!   I am using the %{variablename} syntax to create an AAA HTTP request. The problem is that it is not being able to read custom secure variables.   Is it possible to call mcget with "-secure...
BIG-IP Access Policy Manager (APM)
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Sep 05, 2017

Hi Renato,

you could unsecure every secured variable within VPE by creating an unsecured copy of it.

Variable Assign Action:

Custom Variable: session.my.unsecure_variablename
Security: unsecure
Custom Expression: mcget -secure {session.my.secure_variablename}

After that you can reference the unsecured content of the variable as usual via...

%{session.my.unsecure_variablename}

Cheers, Kai