Forum Discussion
AltocumulusModified Domain Cookie triggered on LTM persistance cookie
I am running 12.1.2 and have configured ASM in learning mode for one of my Virtual servers. I am getting "Modified Domain Cookie" triggered on LTM persistance cookies with the reason stating NEW. Why is this happening. I would have thought that as it is all happening in the one BIG-ip appliance that ASM would know that LTM is setting persistence cookies and not alert on them.
Should I just accept the suggestion to set the enforcement type to allow?
1 Reply
Daniel_VarelaEmployee
The violation you are seeing is not something bad. The ASM needs to be aware of all the cookies running in your application. As part of those cookies you see the LTM persistence cookie and this one needs protection as well. Just add it to your list of enforced cookies and you should not see that violation triggered anymore.
