Manual Chapter : Additional Access Policy Manager Configuration Information

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0
Manual Chapter

Additional Access Policy Manager Configuration Information

F5 Access for macOS
session variables

The following table contains a list of session variables and their attributes.
Session variable
Description
session.client.type
Indicates the client type. For example,
Standalone
.
session.client.activex
Indicates whether ActiveX is supported. The result is always
0
.
session.client.platform
Indicates the platform type, such as
MacOS
.
session.client.plugin
Indicates whether the client is a plugin. This is always set to
0
.
session.client.app_id
The app ID for the client. For F5 Access for macOS this is
f5_access
.
session.client.app_version
The app version. For F5 Access for macOS 2.0.0 this is
2.0
.
session.client.model
Indicates the model name of the mobile device. For example,
MacBookPro
session.client.platform_version
Indicates the platform and version of the mobile device. For example,
Version 10.12.6 (Build 16G29)
session.client.imei
Indicates the IMEI ID of the device. For example, 490154203237518. (Not applicable for Chrome OS)
session.client.jailbreak
Indicates the jailbreak status of the device.
0
indicates the device is not jailbroken,
1
indicates the device is jailbroken, and an empty response indicates that the status of the device is unknown.
session.client.cpu
Indicates the client CPU type. For example,
ARM
.
session.client.biometric_fingerprint
Indicates whether the device supports biometric fingerprint authentication. This is always set to
0
on macOS.
session.client.vpn_scope
Indicates the scope of the VPN tunnel. The result is
device
for a device-wide VPN connection and
per-app
for a per-app VPN.
session.client.vpn_tunnel_type
Indicates the type of VPN tunnel.
For F5 Access for macOS, this is
L3
.
session.client.vpn_start_type
Indicates how the VPN connection was initiated.
  • manual
    - Indicates that the connection was initiated by the user.
  • on-demand
    - Indicates that the connection was initiated by Safari Domains or Per-App VPN.
session.client.version
Indicates the client protocol version. For macOS the value is always
2.0
.
session.client.always_connected_mode
Indicates whether Always-On Mode is configured for the device. The result is always
0
for macOS.
session.client.hostname
This is the device host name (for example,
macos-system
).
session.client.js
Indicates whether the device used Web Logon mode. This is set to
0
for native logon, and
1
for web logon.
session.client.mdm_device_unique_id, session.client.unique_id
This value is provided by an MDM with the
MdmDeviceUniqueId
or
UDID
attribute. If both attributes are provided,
MdmDeviceUniqueId
takes preference. If neither is provided this session variable is not present. If this field is provided by the MDM, both session variables are present. An example value is
RC1KQLCJFOJEEM0XIOB3P52OMUQ3UN9Y3SDA5RWR
.
session.client.mdm_assigned_id
This value is provided by the MDM in the
MdmAssignedId
attribute. If this attribute is not provided, the session variable is not present.
session.client.mdm_instance_id
The value is provided by the MDM in the
MdmInstanceId
attribute. If this attribute is not provided, the session variable is not present.
session.client.mdm_device_wifi_mac_address
The value is provided by the MDM in the
MdmDeviceWifiMacAddress
or
WiFiMAC
attribute. If both attributes are provided,
MdmDeviceWifiMacAddress
takes preference. If neither attribute is provided, the session variable is not present.
session.client.mdm_device_serial_number
The value is provided by the MDM in the
MdmDeviceSerialNumber
or
SerialNumber
attribute.If both attributes are provided,
MdmDeviceSerialNumber
takes preference. If neither attribute is provided, the session variable is not present.