Remove domain cookies

Question

Hi,&nbsp;
By default, our browser is configured to reach https://portal.domain.com based. This portal is reachable throught our F5 APM solutions. The portal access is configured to used domain cookies.&nbsp;
But we need also to reach https://vdi.domain.com. But when we try to reach vdi.cimpa.com after portal.domain.com page has loaded, we have an error due to the domain cookies (LastMRH_Session, MRHSession for the domain "domain.com"). If I remove these cookes and after a page refresh, it's working.&nbsp;
How I can create an iRule to force to delete these cookies when user tries to reach https://vdi.domain.com ?&nbsp;
Regards&nbsp;

niels_van_sluis · Answer

This is a bit of a challenge, because a domain isn't part of a cookie that will be sent on a request. Instead of using domain cookies, try to use Multiple Domains in APM and use Host cookies only.&nbsp;
Depending on your setup, an iRule might work for you if you could for example distinguish on some thing like the referer header. For an example, see the iRule in this post:&nbsp;
https://devcentral.f5.com/questions/how-to-prevent-unauthenticated-logins-when-user-presses-back-button- &nbsp;

Forum Discussion

Remove domain cookies

1 Reply

Recent Discussions

Create a CSR and Key using the BigIP LTM GUI when renewing a certificate

F5 Rseries HA

Error when running bigip_command Playbook against LTM : Syntax Error: unexpected argument /bin/sh\n

Can iRule be used to perform exception of IPI category based on Geolocation

Can iRule mask the payload content on event logs of security

Related Content

Removal Cookies on Client Browser

modified domain cookies

Removal of Client Side F5 Persistence Pool Cookie

Enriching AFM with public domain Threat Intelligence

Rewrite single cookie "USERCOOKIE" domain if cookie domain is "www1.test,example.com"