Manual Chapter : Additional Access Policy Manager Configuration Information

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 15.0.1, 15.0.0, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0
Manual Chapter

Additional Access Policy Manager Configuration Information

F5 Access for macOS session variables

The following table contains a list of session variables and their attributes.

Session variable Description
session.client.type Indicates the client type, for example Standalone.
session.client.activex Indicates whether ActiveX is supported. The result is always 0 for macOS.
session.client.platform Indicates the platform type, such as MacOS .
session.client.plugin Indicates whether the client is a plugin. This is always set to 0.
session.client.app_id The app ID for the client. For F5 Access for macOS this is f5_access.
session.client.app_version The app version. For F5 Access for macOS 2.0.0 this is 2.0.
session.client.model Indicates the model name of the mobile device. For example, MacBookPro
session.client.platform_version Indicates the platform and version of the mobile device. For example, Version 10.12.6 (Build 16G29)
session.client.jailbreak Indicates the jailbreak status of the device. 0 indicates the device is not jailbroken, 1 indicates the device is jailbroken, and an empty response indicates that the status of the device is unknown.
session.client.cpu Indicates the client CPU type. For example, ARM.
session.client.biometric_fingerprint Indicates whether the device supports biometric fingerprint authentication. This is always set to 0 on macOS.
session.client.vpn_scope Indicates the scope of the VPN tunnel. The result is device for a device-wide VPN connection, and per-app for a per-app VPN.
session.client.vpn_tunnel_type Indicates the type of VPN tunnel. For F5 Access for macOS, this is L3.
session.client.vpn_start_type Indicates how the VPN connection was initiated.
  • manual - Indicates that the connection was initiated by the user.
  • on-demand - Indicates that the connection was initiated by Safari Domains or Per-App VPN.
session.client.version Indicates the client protocol version. For macOS the value is always 2.0.
session.client.always_connected_mode Indicates whether Always-On Mode is configured for the device. The result is always 0 for macOS.
session.client.hostname This is the device host name (for example, macos-system).
session.client.js Indicates whether the device used Web Logon mode. This is set to 0 for native logon, and 1 for web logon.
session.client.mdm_device_unique_id, session.client.unique_id This value is provided by an MDM with the MdmDeviceUniqueId or UDID attribute. If both attributes are provided, MdmDeviceUniqueId takes preference. If neither is provided this session variable is not present. If this field is provided by the MDM, both session variables are present. An example value is RC1KQLCJFOJEEM0XIOB3P52OMUQ3UN9Y3SDA5RWR.
session.client.mdm_assigned_id This value is provided by the MDM in the MdmAssignedId attribute. If this attribute is not provided, the session variable is not present.
session.client.mdm_instance_id The value is provided by the MDM in the MdmInstanceId attribute. If this attribute is not provided, the session variable is not present.
session.client.mdm_device_wifi_mac_address The value is provided by the MDM in the MdmDeviceWifiMacAddress or WiFiMAC attribute. If both attributes are provided, MdmDeviceWifiMacAddress takes preference. If neither attribute is provided, the session variable is not present.
session.client.mdm_device_serial_number The value is provided by the MDM in the MdmDeviceSerialNumber or SerialNumber attribute.If both attributes are provided, MdmDeviceSerialNumber takes preference. If neither attribute is provided, the session variable is not present.