For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pedinopa_170325's avatar
pedinopa_170325
Icon for Nimbostratus rankNimbostratus
Aug 06, 2018

jsessionid

I thought we had a solution (I was wrong). Appearently when you use ZAP or other header scanners they will find the JSESSIONID. I found the HTML code I need but would rather do it in the F5. The c...
iRules
LTM
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Aug 07, 2018

The correct place to implement the changes is on your back-end webserver configuration (I assume Tomcat?), so speak to your server sysadmins (if possible).

 

However if you wish to remove it on F5 - here are the past DevCentral questions with iRule code which will do it for you:

 

https://devcentral.f5.com/questions/hide-jsession-id-61022

 

I hope this helps,

 

Sam