Forum Discussion

kunjan's avatar
kunjan
Icon for Nimbostratus rankNimbostratus
Mar 24, 2014

APM Clientless Mode

Hi list,   Few queries regarding clientless mode- 1) Does every request create a new session id for clientless mode for APM? 2) When will it clear/remove the session id?  
BIG-IP Access Policy Manager (APM)
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 16, 2015

As Michael stated, the clientless-mode header has to get inserted BEFORE the access policy starts, so only in the HTTP_REQUEST event. And since you're making the vendor determination based on certificate data, you have to request that certificate via the client SSL profile (not the APM on-demand cert auth agent).