For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cd_312641's avatar
cd_312641
Icon for Nimbostratus rankNimbostratus
Jan 04, 2019

Exchange (OWA) ASM Template and Cookie Violation

Hello,   I have a Portal Access VS which allow to access multiple applications (URIs). One of those is an OWA Exchange 2010. All is working fine.   I am now trying to secure the OWA application...
ASM Advanced WAF
BIG-IP
security
cd's avatar
cd
Icon for Cirrus rankCirrus
Jan 07, 2019

The two cookies I mentioned are present in the template. My understanding is that Allowed cookies are cookies authorized and that can be modified by user. Enforced cookies are cookies authorized but that shouldn't be modified by user.

 

Both UserContext and tzid cookies are in the Enforced section, and flagged as changed by user which triggers the violation.

 

Both cookies are indeed sent by server.