For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dennes_Magayane's avatar
Dennes_Magayane
Icon for Nimbostratus rankNimbostratus
Mar 30, 2016

We use UIE as persistence type for one virtual server. The application has a custom cookie, which we look and set firstly, if it is not existing, the

when HTTP_RESPONSE { if { [HTTP::header exists "Nuance-Session-ID"] } { log local0. "NUANCE Session-ID exist!!!!!. This is the response" persist add uie [HTTP::header "Nuance-Session-ID"] } else { if { [HTTP::cookie exists "JSESSIONID"] } { log local0. "There is no NUANCE Session-ID so I am using JSESSIONID intead. This is the response" log local0. "This is the value of the JSESSIONID= [HTTP::cookie value "JSESSIONID"] " persist add uie [HTTP::cookie "JSESSIONID"] } } } when HTTP_REQUEST { set JSURI [HTTP::uri]

if { [HTTP::header exists "Nuance-Session-ID"] } {
        log local0. "NUANCE Session-ID exist so I am persisting this to the header , this is the Request!!!!"
        persist uie [HTTP::header "Nuance-Session-ID"]
} else {
    if { [HTTP::cookie exists "JSESSIONID"] } {
         log local0. "There is no NUANCE Session-ID so I am using JSESSIONID instead"
        persist uie [HTTP::cookie "JSESSIONID"]
    } else {
      set JSESS [findstr [HTTP::uri] "JSESSIONID" 11 "?"]
      log local0. "There is no JSESSIONID cookie!!!!!!!!!!!!!!"
        if { $JSESS  != "" } {
            log local0. "JSESSIONID was found in the URI not in the Cookie Header !!!!!"
            log local0. "This is the value from URI $JSESS"
            persist uie $JSESS
            }
    }
}

}

No RepliesBe the first to reply