For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

strongarm_46960's avatar
strongarm_46960
Icon for Nimbostratus rankNimbostratus
Dec 01, 2008

To many Cookies

I have just recenty put ASM in front of a large app, this app has been known to set up to 17 or more cookes per session depending on what transaction the user is doing, problem is ASM seems to set a f...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 12, 2008
I was told a while back by ASM development that the ASM cookie name format is TSxxxxxx where the x's are six hex characters generated from the web app (httpclass) name. So if you're seeing multiple ASM cookies being set in the same response, I'd expect it's because there are multiple ASM web applications in the response chain. As you've said that's not the case, I'm not sure what would explain the variety of ASM cookie names.

 

 

Someone from F5 mentioned you have a case open on this. I expect they'll be able to help you investigate this. If you don't mind, can you post the explanation once it's determined?

 

 

Thanks,

 

Aaron