My question is around how do you only allow specific cookies to the pool members. According to a post on the applications support site the way this was fixed was by "block all non-OnBase cookies". My understand with iRules you can use the HTTP::cookie remove command or ASM can help here as well.
