For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

suthomas1's avatar
suthomas1
Icon for Cirrostratus rankCirrostratus
Jul 26, 2020

violations

In our adc security policy events, one of the website always gets blocked for some of its contents on the page. logs point to few violations including modified domain cookie which has a cookie name ...
application delivery
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Jul 26, 2020

Do you mean legitimate clients are getting blocked because of the modified domain cookie violation? In the Request Details section of the violation, you should be able to see the exact value of the domain cookie that was modified by the client. Check with your app developers to determine if that modification should be allowed or blocked.