For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

toneman172_1806's avatar
toneman172_1806
Icon for Nimbostratus rankNimbostratus
Nov 29, 2017

OWASP A2 HTTP Cookie Protection

Hello all,   I'm looking for any information regarding configuration of HTTP cookie protection on ASM v12.1.2. I understand automatic policy builder includes this protection when using enhanced a...
ASM Advanced WAF
security
Shann_P_160848's avatar
Shann_P_160848
Icon for Nimbostratus rankNimbostratus
Nov 29, 2017

I was under the impression that this was default with ASM as I've never had to configure it. ASM adds in a Traffic Shield cookie that is a key/value pair with the cookie itself so that if the cookie is altered or the TS cookie is altered, the violation is thrown.

 

Just my experience with ASM.