Forum Discussion

Cirrus

Nov 13, 2017

TMG to F5 APM Logoff URI

Hey - The Microsoft TMG had a Logoff URI that is appended. How does that convert to the F5 APM. There is a logout URI in the respective policy but it will not take this. Do I need some HTTP forms to ...

application delivery

BIG-IP Access Policy Manager (APM)

TJ_Vreugdenhil

Cirrus

Nov 14, 2017

Hi Stanislas - Thanks for the response!

Yes, we just want to convert the TMG functionality above to the APM.

Would the iRule below not work better? Wouldn't we want to use

"ACCESS::session remove"

as well. Perhaps these two irules are accomplishing the same thing?

when HTTP_REQUEST {
    if {[URI::query [HTTP::uri] "Cmd"] equals "logoff"} {
        ACCESS::session remove
        HTTP::respond 302 Location "https://[HTTP::host]/vdesk/hangup.php3"
        }
}

Stanislas_Piro2
Cumulonimbus
Nov 14, 2017
The two changes you did are useless

when session hit /vdesk/hangup.php3 URI, the session immediately closes.
Never use absolute URL if on the same service (same scheme and same hostname). prefer relative URL like I did.

it makes more work on reverse proxy if rewriting is required

even ASM detect absolute URL on the same service as a potential violation.
TJ_Vreugdenhil
Cirrus
Nov 14, 2017
thanks for the additional detail!