Forum Discussion

Altocumulus

Jul 27, 2023

WAF ASP.NET_SessionId cookie not sent by the client

Hello, I have the following configuration and issue. We have a WAF in place for one of the webservers, which is set to Transparent mode. When a user tries to upload a file to that webserver using ...

application delivery

security

Nikoolayy1

MVP

Jul 27, 2023

See https://my.f5.com/manage/s/article/K21122429

Also allow the cookie on ASM as seen in https://my.f5.com/manage/s/article/K95345460 and play with the options as maybe ASM is adding an extra flag to the cookie. Also remove the cookie if it is enforced as if the cookie is saved the client PC (not session cookie) it can't be enforced.

Outside of that open a TAC case.

Darius44
Altocumulus
Jul 27, 2023
Hello,
Thank you for you answer first of all.
I don't believe the number of cookies is the problem, as the WAF only learned 10 of them and in the request sent by the client when the process is not working it is sending only the TS cookie and when it does work (after the trick with unnasign and re-assign) it send both the TS and the ASP cookie.
Thank you!
- Nikoolayy1
  MVP
  Jul 27, 2023
  See the extra notes I just added but maybe it will need a TAC assistance.