For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jasonabbott_407's avatar
jasonabbott_407
Icon for Nimbostratus rankNimbostratus
Dec 06, 2012

User-Agent header replacement

Hi everyone. I have an old Oracle Application server that will only work with Kerberos for SSO if the User agent string matches IE 6 on Windows XP. This is a problem as we haven't been running that for quite some time; however it wasn't really a big issue for many people. With a new push internally we have been pushing out Win7 to the majority of users so this will become a much larger problem.

 

My question is this: Can I rewrite the headers for all traffic going to the App server to show the "correct" user agent? I have the rule below, but it doesn't seem to be working.

 

when HTTP_REQUEST {

 

 

HTTP::header replace "User-Agent" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

 

 

}

 

This Virtual Server is all in SSL and I have client and server SSL certificates so I can to the unencrypt and reencrypt. What am I missing? Thanks a lot for all your help over the years, I have stalked this forum for a long time.

 

 

Jason

 

2 Replies

  • I tried your irule and it worked fine in my test environment. Can you tell if the irule is being applied to the request via logging?

     

     

    when HTTP_REQUEST {

     

    log local0. "[HTTP::header User-Agent]"

     

    HTTP::header replace "User-Agent" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"

     

    log local0. "[HTTP::header User-Agent]"

     

    }
  • Wow; thanks for that. A little bit of trying to figure out why my rules weren't applying and I found out that someone had changed the DNS for the service to bypass my LTM. Now that that is sorted; it seems to be applying. Thanks for the ideas to look at!