For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Damir_Kovacic_2's avatar
Damir_Kovacic_2
Icon for Nimbostratus rankNimbostratus
Apr 14, 2011

APM HTTP sessionless support for web services

I have a question how to support web services authentication over APM. I have managed to get basic authentication using iRule to do ACCESS::session insertion of username and password. However, I found...
app sec
BIG-IP Access Policy Manager (APM)
security
John_Beckmann's avatar
John_Beckmann
Icon for Employee rankEmployee
Feb 29, 2016
You could try to disable session id rotation:- tmsh modify sys db apm.rotatesessionid value disable I believe the session id is rotated for security reasons, but this is not always compatible with clients