For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SalC's avatar
SalC
Icon for Altostratus rankAltostratus
Jul 14, 2022

Cookie Persistence Profile - renamed cookie but still seeing default BIGipServer<pool_name> in ASM

Was trying to obfuscate by changing the cookie name in the persistence cookie profile, but I'm still seeing instances of Learning suggestions in ASM (WAF) for the default cookie name BIGipServer<pool...
security
  • SalC's avatar
    SalC
    Icon for Altostratus rankAltostratus
    Jul 15, 2022

    Yep, and the ASM learning suggestions are seeing the default BIGIP cookie still and suggesting I add it that way, when in theory? the default cookie shouldn't be in use.  I'm going to try setting an expiration timer on the cookie as opposed to session, and see if that clears any old cookies users may still have (I'm thinking even after several weeks.. users may not have closed their browsers)