For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

diana_24252's avatar
diana_24252
Icon for Nimbostratus rankNimbostratus
Apr 02, 2009

Need iRule to enable "secure" attribute on cookies

ASP.NET application is sending 4 cookies to the client and they are not marked "secure" (i.e., the cookies don't have the attribute that tells the client PC to send the cookies only over an SSL connec...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 02, 2009
Something like this? 

 
 when HTTP_RESPONSE { 
    foreach cookiename [list ASP.NET_SessionId .ASPXAUTH VenueDLA .ASPXCOOKIEAUTH-VenueRRDAdmin] { 
       HTTP::cookie secure $cookiename enable; 
    } 
 }

Aaron