ASM: How to protection of session hijacking, What is principle?

Hi there,

 

yes, it can affect users. Clients without Java script will be blocked. Be aware e.g. with COMPREHENSIVE policy even in transparent mode.

 

Tom

 

Session Hijacking protection is described in the ASM Implementation manual here:

 

https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-12-1-0/15.html

 

Hope this helps,

 

Sam