For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Feb 15, 2018

This is a bit of a challenge, because a domain isn't part of a cookie that will be sent on a request. Instead of using domain cookies, try to use Multiple Domains in APM and use Host cookies only.

 

Depending on your setup, an iRule might work for you if you could for example distinguish on some thing like the referer header. For an example, see the iRule in this post:

 

https://devcentral.f5.com/questions/how-to-prevent-unauthenticated-logins-when-user-presses-back-button-