Forum Discussion
Masking jsessionid with ASM
I am looking for some input on how we can resolve an issue we have with a weblogic based application which is behind an F5 with ASM. The problem is that we would like to mask the jsesionid from the ur...
Well the concerns are that this application is accessed over straight http as well as ssl. In my perfect world they would switch to stricktly https and the concern would go away. So really the concern is for the situation where cookies are not suported and the user is accessing the site over http. This is good information for protecting from this when cookies are in use, but I am sorta stumped as to how to handle this for http traffic.
