For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smalex's avatar
smalex
Icon for Altostratus rankAltostratus
Jun 13, 2019

CSRF Protection makes application inaccessible from Chrome

We have enabled ASM recently. If I enable CSRF Protection, the site becomes inaccessible from chrome but works fine from IE. When disabled, site loads perfectly fine. I could not find any logs under ...
application delivery
ASM Advanced WAF
BIG-IP
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Jun 13, 2019

The CSRF protection inserts javascript. Is javascript enabled in the chrome browser? Check: chrome://settings/content/javascript

 

If enabled, you can also open developer mode (F12) and take a look at the console. Maybe this will help you the find the cause of the problem. You can also use a tool like fiddler and make both a trace when accessing the site form IE and Chrome. Then compare those two traces.

  • smalex's avatar
    smalex
    Icon for Altostratus rankAltostratus
    Jun 13, 2019

    Java script is enabled.