trying to call external web service to determine VPN access

I'll answer this for anyone else that comes across it in the future.

It seems session variables cannot be put anywhere. To make this work, I had to edit the web form to create a hidden field and then insert the mac address as a hidden form parameter using

%{session.client.mac_address}