Forum Discussion

Dave_Burnett_20's avatar
Dave_Burnett_20
Icon for Nimbostratus rankNimbostratus
Nov 10, 2008

Modified Domain Cookie blocking

We have recently installed a pair of F56400s (v9.4.3) in front of our website with ASM in blocking mode.     Despite the fact that our Website only utilises a handful of cookies (all confi...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 13, 2008
Nevermind that suggestion... it shouldn't break your app if you removed the other application's cookies. The client would continue to submit the cookies to other applications on the same domain if they were set with a valid domain value by the other application.

 

 

And the cookie validation ASM provides with the modified domain cookies is good protection against cross site script attacks, so it would be ideal to leave the check enabled if you can fix the "non-local" cookies. This could be done by finding the app that is setting them or by removing them with an iRule in the HTTP_REQUEST event before ASM parses the request.

 

 

Aaron