Additional Access Policy Manager Configuration Information

session.client.type

Indicates the client type. For example, Standalone.

session.client.activex

Indicates whether ActiveX is supported. The result is always 0.

session.client.platform

Indicates the platform type, such as MacOS.

session.client.plugin

Indicates whether the client is a plugin. This is always set to 0.

session.client.app_id

The app ID for the client. For F5 Access for macOS this is f5_access.

session.client.app_version

The app version. For F5 Access for macOS 2.0.0 this is 2.0.

session.client.model

Indicates the model name of the mobile device. For example, MacBookPro

session.client.platform_version

Indicates the platform and version of the mobile device. For example, Version 10.12.6 (Build 16G29)

session.client.imei

Indicates the IMEI ID of the device. For example, 490154203237518. (Not applicable for Chrome OS)

session.client.jailbreak

Indicates the jailbreak status of the device. 0 indicates the device is not jailbroken, 1 indicates the device is jailbroken, and an empty response indicates that the status of the device is unknown.

session.client.cpu

Indicates the client CPU type. For example, ARM.

session.client.biometric_fingerprint

Indicates whether the device supports biometric fingerprint authentication. This is always set to 0 on macOS.

session.client.vpn_scope

Indicates the scope of the VPN tunnel. The result is device for a device-wide VPN connection and per-app for a per-app VPN.

session.client.vpn_tunnel_type

Indicates the type of VPN tunnel. For F5 Access for macOS, this is L3.

session.client.vpn_start_type

Indicates how the VPN connection was initiated. - manual - Indicates that the connection was initiated by the user.

• on-demand - Indicates that the connection was initiated by Safari Domains or Per-App VPN.

session.client.version

Indicates the client protocol version. For macOS the value is always 2.0.

session.client.always_connected_mode

Indicates whether Always-On Mode is configured for the device. The result is always 0 for macOS.

session.client.hostname

This is the device host name (for example, macos-system).

session.client.js

Indicates whether the device used Web Logon mode. This is set to 0 for native logon, and 1 for web logon.

session.client.mdm_device_unique_id, session.client.unique_id

This value is provided by an MDM with the MdmDeviceUniqueId or UDID attribute. If both attributes are provided, MdmDeviceUniqueId takes preference. If neither is provided this session variable is not present. If this field is provided by the MDM, both session variables are present. An example value is RC1KQLCJFOJEEM0XIOB3P52OMUQ3UN9Y3SDA5RWR.

session.client.mdm_assigned_id

This value is provided by the MDM in the MdmAssignedId attribute. If this attribute is not provided, the session variable is not present.

session.client.mdm_instance_id

The value is provided by the MDM in the MdmInstanceId attribute. If this attribute is not provided, the session variable is not present.

session.client.mdm_device_wifi_mac_address

The value is provided by the MDM in the MdmDeviceWifiMacAddress or WiFiMAC attribute. If both attributes are provided, MdmDeviceWifiMacAddress takes preference. If neither attribute is provided, the session variable is not present.

session.client.mdm_device_serial_number

The value is provided by the MDM in the MdmDeviceSerialNumber or SerialNumber attribute.If both attributes are provided, MdmDeviceSerialNumber takes preference. If neither attribute is provided, the session variable is not present.