For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ab30_149107's avatar
ab30_149107
Icon for Nimbostratus rankNimbostratus
May 07, 2018

OWA - Cookie Encryption

Hi,   After encrypting one of OWA cookie X-OWA-CANARY , application stops working. Anyboday came across this issue or encrypted OWA cookies?  
application delivery
ASM Advanced WAF
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
May 08, 2018

Hello,

 

Can you confirm that you encrypt owa cookie using "HTTP Profile" in section "Encrypt Cookies" by adding the name of the cookie.

 

Next what kind of problem did you encounter in your application?

 

Then You checked that user retrieve the encrypted cookie using F12 (developer tools)

 

My last point, Can you validate that owa don't need X-OWA-CANARY cookie in client side in order to work correctly?

 

Regards