There are 3 ASM cookies because ASM sees 3 different paths in two different requests,
- /
- /confidential/
- /confidential
In the previous trace, all the cookies have the following path "/confidential", therefore ASM sends only 2 ASM cookies to the client,
TSfb4472 Received 57592a963d1114d054522ca088ceceb3663a5ac01ed1c0b1494248d0f945da7s14b88852364a514e01649925ef099d595fs260ac0ec50efbd2580aaf83943e858adeagt6 /confidential www.foobar.com (Session)
TSb5519b Received c47b3230e29e90bcc2f4207a8b391ec5663a5ac01ed1c0b149424a12f945da7s14b88852364a514e01649925ef0fe8cac9s2 / www.foobar.com (Session)