Deploy APM per-request policy and Application Traffic Insight(former Device ID+)

[Kenji_Omori]

Hi F5 Community,

I tried to deploy Application Traffic Insight to APM Zero Trust environment using the JavaScript Tag. But I couldn't find "login.inc" file in per-request policy customization screen on GUI.

<Question>

Is there any JavaScript Tag insert method in per-request policy?

<Test environment>

-BIG-IP : v16.1.1

-Module : only APM

-Application Traffic Insight deployment method: JavaScript Tag

-Zero Trust config name: IAP-single-proxy

<Test procedure>

1. Deploy a Zero Trust configuration using Guided Configuration

 

2.modify "logon.inc" page in per-request policy to add JavaScript Tag

 

 

But, I couldn't find "logon.inc" page in per-request policices customization menu and APM local directory.

# find / -name 'logon.inc'
/var/sam/www/client/customization-source/Common/standard/logon/default_logon/de/logon.inc
/var/sam/www/client/customization-source/Common/standard/logon/default_logon/zh-tw/logon.inc
--- snip ---
/opt/.sdm/var/config/rest/iapps/f5-iappslx-access-exchange/nodejs/logon.inc

I found out "logon.inc" in "per-SESSION policy" and I could insert a JavaScript Tag and get a correct test result.

 

Thanks,

Kenji Omori

[Nikoolayy1]

You to instert the javascript for Shape bot security on the APM?

Also from what I read the per request policy should use the same logon page. When you customize the logon page and test triggering it with per request policy do you see difference in the two logon pages. If you see then maybe the F5 TAC is needed.

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-access-policy-manager-visual-policy-editor/access-...

https://www.f5.com/es_es/products/security/application-traffic-insight