Forum Discussion

Anthony's avatar
Anthony
Icon for Nimbostratus rankNimbostratus
Mar 08, 2013

ASM Cookie assistance

Hi all.     Since upgrading to 11.2 we have suffered with 10's of thousands of Modified ASM Cookie alerts each week. I understand that the ASM cookie is session based so would expect these t...
app sec
BIG-IP Access Policy Manager (APM)
security
Mike_Nepomny's avatar
Mike_Nepomny
Icon for Nimbostratus rankNimbostratus
May 12, 2013
We started to experience same problem after v11.2.1 upgrade. ASM is setting at least two TS cookie with different domains:

 

 

TSaeea70Received.abc.com(Session)ServerYesNo

 

TSf1d257Received.commonag-portal-fit.nj.abc.com(Session)ServerYesNo

 

 

TS cookie with domain=.abc.com will be sent by browser to all apps in all abc.com environments and will trigger MOD_ASM_COOKIE violation.

 

 

Why ASM is setting cookie with domain=.abc.com ?

 

 

Thank you