Forum Discussion

Carlos_13563's avatar
Nov 27, 2013

F5 authentication cookie (token) issues

. When the F5 has authenticated a user’s browser, it issues a hidden session cookie named F5_ST. This cookie has embedded commas in it which are in violation of RFC 2109. Unfortunately, I cannot read or set cookies with commas. From what I can see so far, Microsoft’s .Net Framework will not allow me to send invalid cookies at the level of access I have. I am exploring this more. Is there a way of setting the format of their authorization cookies? Here is an example of one of these cookies

 

Next we have the F5 redirects for the C3 Help home page. Notice how my browser sends the F5_ST cookie:

 

F5_ST=1,1,1,1385574542,28800![![Image Text](/Portals/0/Users/251/63/13563/11-27-2013 1-29-32 PM.png)](/Portals/0/Users/251/63/13563/11-27-2013 1-28-17 PM.png)