For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zack_254145's avatar
zack_254145
Icon for Nimbostratus rankNimbostratus
Sep 06, 2017

When will ASM generate "Illegal session ID in URL" violation?

Hi Folks,   I am trying to understand this violation: Illegal session ID in URL, but still quite confusing after a bunch of tests. How/when does ASM consider the session ID in URL is illegal?   ...
application delivery
ASM Advanced WAF
security
ErkkiS_295148's avatar
ErkkiS_295148
Icon for Cirrus rankCirrus
Sep 19, 2017

Could it be someone has a bookmark he uses to go to the site which has an URL that contains session ID from some past session which ASM detects and marks as invalid?