For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Manuel_60430's avatar
Manuel_60430
Icon for Nimbostratus rankNimbostratus
Jul 27, 2016

check 3rd party cookie in APM?

Is it possible to check for a inserted cookie from a 3rd party in APM?

 

We are transitioning our various remote access gateways to F5. In this phase we would like to avoid that users need to authenticate multiple times depending if the resource is already migrated behind the APM or not. It would be very easy now to check the session cookie from the 3rd party device and just authorize the user thereafter.

 

Thanks for the help!

 

application delivery
BIG-IP Access Policy Manager (APM)
security

1 Reply

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jul 27, 2016

    not via a specific VPE cookie check element as far as im aware of it. but you can add an iRule event element and check it there.

     

    just checking if specific cookie exists doesn't feel very safe though. would you be able to also check the session ID with the system that hands those out?