Forum Discussion

Nimbostratus

Dec 12, 2018

How to add the 'Secure' and 'HttpOnly' attributes for ASM Frame cookies

I followed the instructions laid out in https://support.f5.com/csp/article/K13787?sr=45119777, but that only added the 'Secure' and 'HttpOnly' attributes for the ASM Main cookie. How do I add these same attributes to the ASM Frame cookies?

ASM Advanced WAF

asm ts cookie

security

samstep
Cirrocumulus
Feb 11, 2019
You can achieve this by using an iRule and HTP_RESPONSE_RELEASE event, see:

K14211: Using an iRule to parse post-ASM requests and responses

https://support.f5.com/csp/article/K14211