For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JP_135500's avatar
JP_135500
Icon for Nimbostratus rankNimbostratus
Jul 08, 2014

What do I do when a user bookmarks the F5 APM external logon page instead of the actual URL?

We are getting ready to launch our first LTM+APM and an odd issue was identified in our pilot. In our current setup, with ISA 2006, users bookmark the logon page instead of the actual URL they're trying to reach. While we will try to educate users, I'm wondering if it's possible to append a query string to the logon page URL so if they bookmark it, we can at least capture what page they were trying to bookmark. We use an external logon page.

 

If the query string idea is a bad one, what other options might I explore? Has this come up for any of you guys?

 

Thanks!

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
devops
iRules
security

1 Reply

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Jul 09, 2014

    You can do something like this:

    when CLIENT_ACCEPTED {
    ACCESS::restrict_irule_events disable 
}
when HTTP_REQUEST {
    if { ( [HTTP::uri] equals "/my.policy" ) and not ( [HTTP::cookie exists MRHSession] ) } {
        HTTP::redirect "http://[HTTP::host]/"
    }   
}