Manual Chapter :
About per-request policy subroutines
Applies To:
Show VersionsBIG-IP APM
- 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9
About per-request policy subroutines
A per-request policy
subroutine
is a
collection of actions. What distinguishes a subroutine from other collections of actions (such as
macros), is that a subroutine starts a subsession that, for its duration, controls user access to
specified resources. If a subroutine has an established subsession, subroutine execution is
skipped. A subroutine is therefore useful for cases that require user interaction (such as a
confirmation dialog or a step-up authentication), since it allows skipping that interaction in a
subsequent access.You cannot use subroutines in macros within per-request policies.
Subroutine properties specify subsession timeout values, maximum macro loop
count, and gating criteria. You can reauthenticate, check for changes on the client, or take
other actions based on timeouts or gating criteria.