For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mike_aws_119486's avatar
mike_aws_119486
Icon for Nimbostratus rankNimbostratus
Jan 14, 2014

Rename default MRHsession cookie?

I have a requirement to have APM Edge (at the Edge of the network facing internet) connecting to an APM appliance within the internal network which is providing Portal Access/SSO to apps.   I've c...
BIG-IP Access Policy Manager (APM)
deployment
security
Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Nov 04, 2021

Hi Kevin, great Irule seems to work when having portal mode because all URLs are rewritten, when using LTM+APM mode (as you already mentioned) we need to map and redirect or rewrite all embedded F5 urls so they wont be processed by the external F5. We tried to redirect /my.policy to /policy and then at request release to rewrite it back to /my.policy and seems to work however the cookie header is empty when using your Irule. Do you have any guidance on how we could perform this correctly in APM+LTM mode with 2 F5 APM chained?

Marvin's avatar
Marvin
Icon for Cirrocumulus rankCirrocumulus
Nov 04, 2021

we cant modify the internal F5 so it needs to be fixed on the external F5