Forum Discussion
Masking jsessionid with ASM
I am looking for some input on how we can resolve an issue we have with a weblogic based application which is behind an F5 with ASM. The problem is that we would like to mask the jsesionid from the ur...
So from the second responce in this thread it appears that we could ensure that the jsesionid was only used by the appropriate client assuming we are ok with customers who don't support cookies being blocked. After discussing this with my development team I beleive this is the direction they want us to go in, but I am not sure I am seeing everything needed to do this. I have enabled dynamic sessions using this regex ;jsessionid=.{32} but this seems to make no diffrence even when I put the policy into blocking mode. Do I need to do something in paramaters to make this work?
