variable in different event of Irule

Hi

Have you tried storing the xxf header as an APM variable right at the start when then policy first fires....?

when HTTP_REQUEST {
if {[HTTP::header exists X-Forwarded-For]}{
set xff [HTTP::header values X-Forwarded-For]
}
}
 
when ACCESS_SESSION_STARTED {
if {[info exists xff]}{
ACCESS::session data set session.custom.xff $xff
}
}

If the value is saved as an APM variable then you should be able to manipulate it (or take action if it is empty) further on in the APM policy