Forum Discussion
AlgebraicMirror
Altostratus
AltostratusIs there any way, in an iRule, to see if an APM session exists using the regular SID format?
Hi. Does anyone know any way to look up an APM session based on session ID? When I say session ID, I am talking about the session ID format found throughout the product's GUI, report pages, etc (and ...
Making a guess here, I would say most likely not. The APM uses a session ID that is very long to make it very hard to guess. If you were able to locate the same session by only using 8 characters, it would mean that the rest are insignificant and an attacker can hijack the session much easier.
HTH.
brad_11480
Nimbostratus
Nimbostratuswell, I just realized that the first 24 characters can be anything-- it only looks and uses the last 8 even though it requires it to be 24.. I just put 'x' and 'z' for the first 24 and it is just fine.
