For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dzs's avatar
Dzs
Icon for Nimbostratus rankNimbostratus
Apr 03, 2020

Modified domain cookie(s) problem

Hello,

Maybe a really dumb question, we are playing around with our f5 and see a lot of this - all such request are blocked. Any idea why this happens?

Original request: PD_STATEFUL_***=%2Fpublic;
Decoded request:  PD_STATEFUL_***=/public;
ASM Advanced WAF
BIG-IP
security

2 Replies

  • Andrew-F5's avatar
    Andrew-F5
    Icon for Employee rankEmployee
    Apr 03, 2020

    When reviewing your ASM request logs for this request what is it reporting for the violation?

    Example "illegal meta character in value"

     

     

  • Dzs's avatar
    Dzs
    Icon for Nimbostratus rankNimbostratus
    Apr 03, 2020

    Just this:  Modified domain cookie(s) [1] 

    Cookie Name: PD_STATEFUL_***

    Cookie Value: %2Fpublic

    Reason:New Cookie