For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

BIG-IP APM: Max Sessions Per User – Enable users to terminate a specified session

Technical Challenge Recently I was speaking with a customer and they mentioned that they leveraged the “Max Sessions Per User” setting within BIG-IP APM Access Profile to limit the number ...
Published Dec 22, 2015
Version 1.0
access
application delivery
BIG-IP Access Policy Manager (APM)
Ryan77777's avatar
Ryan77777
Icon for Altocumulus rankAltocumulus
Sep 03, 2019

Found a bug:

 

set apm_username [ACCESS::session data get session.logon.last.username]

set apm_cookie_list [ ACCESS::uuid getsid "[PROFILE::access name].$apm_username" ]

 

If the user logs in with IAmAUser and iamauser then that is two different logins based on the above.