Forum Discussion

Mohamed_Sayed_3's avatar
Mohamed_Sayed_3
Icon for Nimbostratus rankNimbostratus
Jan 29, 2019

Setting SameSite flag on ASM cookie using ASM system variables

Hello,   I've a question, can we add samesite flag to ASM cookie with the same way we do for httponly and secure flags through creating system variables using the below KB: https://support.f5.com/...
application delivery
ASM Advanced WAF
asm ts cookie
samesite
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Feb 05, 2019

You can modify ASM cookies and add SameSite attribute (or do any other header manipulation) using an iRule and HTP_RESPONSE_RELEASE event, see:

 

K14211: Using an iRule to parse post-ASM requests and responses

 

https://support.f5.com/csp/article/K14211