Bug ID 471452: Access policy in progress with multiple tabs, landing URL set to the tab in which policy is completed.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.6.2 HF1, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.1 HF6

Opened: Jul 11, 2014

Severity: 4-Minor

Related Article: K16952

Symptoms

When URLs from multiple browser tabs start an access policy, the session is created with the landing URL from the first tab that started the session, not with URL that continued and finished creating the access session.

Impact

This may cause BIG-IP as SAML SP unable to establish a session with IdP. In the case of LTM and APM, the user is always redirected to the URL from first tab after policy execution finishes.

Conditions

Accessing the access policy VIP with different landing URLs before access policy session created. This causes the access policy to run from two different landing URLs.

Workaround

None.

Fix Information

When URLs from multiple browser tabs start an access policy, the landing URL is set to the URL from the browser that finished the access policy execution.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips