For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Feb 09, 2011

ASM removing cookies????

I wanted to see if anyone out there has ever encountered an instance where ASM would strip a cookie out of a request for whatever reason. We are having a problem with an application where users are b...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 09, 2011
Hi Mike,

 

 

I don't remember every seeing ASM remove a cookie from a request or response. If it's reproducible, you could capture tcpdumps on LTM of the client and serverside connections to compare. I don't expect you'd see ASM causing this problem though as ASM typically doesn't modify content.

 

 

Aaron