Forum Discussion

pedinopa_170325's avatar
pedinopa_170325
Icon for Nimbostratus rankNimbostratus
Aug 06, 2018

jsessionid

I thought we had a solution (I was wrong). Appearently when you use ZAP or other header scanners they will find the JSESSIONID. I found the HTML code I need but would rather do it in the F5. The c...
iRules
LTM
security
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Aug 06, 2018

Little confused on what you are trying to do but with an iRule you can do the following to remove the JSESSIONID cookie in the response:

when HTTP_RESPONSE {
  HTTP::cookie remove JSESSIONID
}

Would this not break the backend application as remove the session state between the client and the backend?