For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Darius44's avatar
Darius44
Icon for Altocumulus rankAltocumulus
Jul 27, 2023

WAF ASP.NET_SessionId cookie not sent by the client

Hello, I have the following configuration and issue. We have a WAF in place for one of the webservers, which is set to Transparent mode. When a user tries to upload a file to that webserver using ...
application delivery
security
Darius44's avatar
Darius44
Icon for Altocumulus rankAltocumulus
Jul 27, 2023

Hello,

Thank you for you answer first of all.

I don't believe the number of cookies is the problem, as the WAF only learned 10 of them and in the request sent by the client when the process is not working it is sending only the TS cookie and when it does work (after the trick with unnasign and re-assign) it send both the TS and the ASP cookie.

Thank you!

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jul 27, 2023

See the extra notes I just added but maybe it will need a TAC assistance.