For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Sep 11, 2017

java application issue with ASM

Folks

 

i am facing issue with application which use java client over F5 ASM but some reasons were are getting 501 response towards client does anybody face similar issue if i remove the asm policy application works fine, what i observed is multiple cookie has been inserted by ASM then application is not working any thoughts?

 

application delivery
ASM Advanced WAF
LTM

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Sep 12, 2017

    ASM only allows GET, HEAD and POST request methods. 501 Not Implemented suggests the client is sending a request with a different method. Can you confirm this? If you do a packet trace, httpwatch/fiddler etc. do you see any methods being used other than the above?

     

  • Snl's avatar
    Snl
    Icon for Cirrostratus rankCirrostratus
    Sep 12, 2017

    Hi Nathan

     

    Thanks for your comments , I have checked from tcp dump java client doing POST request only also I have opened TAC case as per TAC application is not supporting the request when multiple cookies exist in the response ( ASM inserting additional cookie along with server cookie) which cause client sending reset to LTM/ASM when i remove the ASM policy in LTM observed only server cookie exist and application working fine without any issue.

     

    any thoughts on this?

     

  • Marcus_Poon's avatar
    Marcus_Poon
    Icon for Nimbostratus rankNimbostratus
    Nov 11, 2020

    I have faced the similar issue when running program version is Java on Azul Zulu JRE version 1.8.0_172 at Windows 10 or Windows Server 2016.

    Does anyone know how to fix it ?

    Thanks.