Forum Discussion

Nimbostratus

Apr 28, 2017

Ignore certain cookies for ASM

Hi All, I am having a problem on our LTM/ASM (ver 11.5.1) box. We use cookie persistence configured on the virtual server. Lately we had to encrypt the persistence cookie for added security. The...

Historic F5 Account

You can accomplish the using Header-Based Content Profiles https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/31.html

Under the "Header-Based Content Profiles", there are 3 options

Request Header Name ---> Set a Cookie header. Request Header Value ---> Set a Cookie value. Request Body Handling ---> Set as "Do nothing"

This will have to be configured per-url.

Kenny_Aldrin

Nimbostratus

Jun 05, 2017

Thanks Tikka!

I've got the same answer from F5 support. Case closed

Forum Discussion

Ignore certain cookies for ASM

Recent Discussions

What happens if I only enable ASM in BIG-IP Under System > Resource Provisioning

What is the meaning is 52% block in WAF

Rundeck ansible F5 errors

rewrite Azure AD response for portal access via web portal

AS3 Monitoring multiple ports selectively

Related Content

Cookie-based DDoS protection

Decoding the IPv4 address from the persistence cookie

2. SYN Cookie: Operation

Cookie Tampering Protection using F5 Distributed Cloud Platform

1. SYN Cookie: Intro