For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 02, 2015

Okay, so a few more questions:

 

  1. What is your SSO doing? What type of authentication?

     

  2. Is it that the 3rd group doesn't need SSO either? How do they authenticate to the backend servers?

     

  3. Can you look at the HTTP requests coming from the XHR agents and see if a) the MRHSession cookie exists when it fails, and b) if there's an Authorization header in the request?