I have 12 hour cookie persistence enable, it works fine with other browser except IE. Users are complaining about getting logged off randomly. Is there any fix for this? {External VIP} --> {Internal VIP} --> {Pool Members}. Cookie persistence is applied to the internal VIP.

so, what is the problem? doesn't browser send the cookie or does bigip send traffic to the server not matching the cookie?

If a user has their privacy settings set to "HIGH" in IE it requires a P3P compact policy header to accept file cookies. It you used a session cookie, IE users would have that issue, but it also wouldn't have a timeout value. It would require the browser to be closed. If you truly want to timeout your persistence cookies, I would recommend looking into how Facebook and Google get around the P3P policy. I'm not going to link to it, but a simple search should find the info required.

IE doesnt show the cookie expiry time. Users on IE get logged off randomly.

IE issue with cookie persistence.

10 Replies

nitass
Employee
Nov 20, 2014
so, what is the problem? doesn't browser send the cookie or does bigip send traffic to the server not matching the cookie?
- Nitin2014_16246
  Nimbostratus
  Nov 21, 2014
  IE doesnt show the cookie expiry time. Users on IE get logged off randomly.
- Brad_Parker
  Cirrus
  Nov 21, 2014
  Are you sending the cookie with ever request? It could be possible that the cookie is reaching its expiration mid session because it was first set in a previous session and you're not sending the cookie with each request.
nitass_89166
Noctilucent
Nov 20, 2014
so, what is the problem? doesn't browser send the cookie or does bigip send traffic to the server not matching the cookie?
- Nitin2014_16246
  Nimbostratus
  Nov 21, 2014
  IE doesnt show the cookie expiry time. Users on IE get logged off randomly.
- Brad_Parker
  Cirrus
  Nov 21, 2014
  Are you sending the cookie with ever request? It could be possible that the cookie is reaching its expiration mid session because it was first set in a previous session and you're not sending the cookie with each request.
Brad_Parker
Cirrus
Nov 21, 2014
If a user has their privacy settings set to "HIGH" in IE it requires a P3P compact policy header to accept file cookies. It you used a session cookie, IE users would have that issue, but it also wouldn't have a timeout value. It would require the browser to be closed. If you truly want to timeout your persistence cookies, I would recommend looking into how Facebook and Google get around the P3P policy. I'm not going to link to it, but a simple search should find the info required.
Nitin2014_16246
Nimbostratus
May 05, 2015
Bug: 397337 : BIG-IP should send cookie always in response especially if cookie expiration is in play.

Solution: Upgrade code to 11.3
Nitin2014_16246
Nimbostratus
May 05, 2015
Bug: 397337 : BIG-IP should send cookie always in response especially if cookie expiration is in play.

Solution: Upgrade code to 11.3
Nitin2014_16246
Nimbostratus
May 05, 2015
Bug: 397337 : BIG-IP should send cookie always in response especially if cookie expiration is in play.

Solution: Upgrade code to 11.3