For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Spela_317265's avatar
Spela_317265
Icon for Nimbostratus rankNimbostratus
Oct 16, 2017

ASM TS cookie issue

Hello,   I've some problems with ASM cookies. We have a webpage, where cookies are strictly not allowed. Is there any chance to stop ASM cookie injection? I checked all ASM cookies options availab...
ASM Advanced WAF
asm ts cookie
security
CharlesCS's avatar
CharlesCS
Icon for Cirrus rankCirrus
Oct 16, 2017

ASM cookies are inserted into outbound (virtual server to client) only. When the client sends additional requests, ASM uses those cookies to retain its status within the session.

 

If the problem is that the cookies are being forwarded from the BIG-IP to the application server(s), article K13693 describes how to delete them via an iRule.