iRule for application cookie with LTM and APM

Hi

 

 

I have a similar requirement. At first, I thought I could use Cookie Remove - but that would probably break the session/app and not possible.

 

 

We then tried to look at maybe using the F5 to encrypt the cookie, thus securing it on the client.

 

 

However, the customer is quite sure they want it to not reside on the client at all! Therefore needing some way to use a session table + cookie "store".

 

 

Since we're looking at APM we we're thinking MRHsession cookie...

 

 

The requirement is that the two cookies from the app, one is used for Authenticaton has been accepted (so APM for example can use that in the HTTP SSO Creds for successful Auth) and the other contains something quite specific for the application...

 

 

... which is to control the session timeout of that user.

 

 

So... I think our require is like yours James.

 

 

Colin - any ideas here?

 

 

Seems to be stretching the reverse proxy function somewhat...