For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lorenze's avatar
lorenze
Icon for Altocumulus rankAltocumulus
Jul 09, 2020

Set Cookie SameSite = None

Hello Cool People.   I'm fairly new to F5 and was wondering if there is an easy way to set the SameSite Cookie attribute to "None". I did look at the F5 irule article and don't quite understand t...
application delivery
BIG-IP
cookie.
iRules
samesite
security
lorenze's avatar
lorenze
Icon for Altocumulus rankAltocumulus
Jul 09, 2020

Tried creating an irule with the following entry but all doesnt seem to address the issue:

when HTTP_RESPONSE {
	set COOKIE_VAL [HTTP::header values "Set-Cookie"]
	HTTP::header remove "Set-Cookie"
 
	foreach COOKIE_NAME $COOKIE_VAL {
		HTTP::header insert "Set-Cookie" "${COOKIE_NAME}; SameSite=none"
                HTTP::cookie secure ${COOKIE_NAME} enable
	}
}
when HTTP_RESPONSE {
 
        HTTP::header replace Set-Cookie "[HTTP::header Set-Cookie]; HttpOnly;SameSite=none; Secure"
 
 
 
  }

Appreciate any response. Thank You!