For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 05, 2015

If you can see both sides of the traffic, watch what the client sends, particularly the Authorization header, and see what shows up on the server side. I'm thinking that APM isn't overwriting the client's Authorization header.