For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jirka_Placatka_'s avatar
Jirka_Placatka_
Icon for Nimbostratus rankNimbostratus
May 12, 2017

Disable ASM signature for all cookie parameters

Hello   How can I disable a signature for all cookies only? Example - I have a cookie:   Cookie: .AspNet.ApplicationCookie1 = XGtw4WmA3N_wmXLWU22Y8m1K; .AspNet.ApplicationCookie2 = XXIPqExECpMD...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 23, 2017

This potentially looks like an ASM bug to me - which version of BIG-IP are you using?

 

I suggest you first try to create a bit more specific wildcard cookie like this: .AspNet.App* and try to disable the signature on it - if you are still getting SQLInjection false positives - raise a support case with F5 by emailing support@