F5Networks / f5-appsvcs-templates

F5 BIG-IP Application Service Templates (FAST)
Apache License 2.0
32 stars 13 forks source link

Exchange Template - Problem in Chrome because of SameSite=None / Secure Flag #77

Closed mkretzer closed 2 years ago

mkretzer commented 2 years ago

We are currently using the Exchange FAST template with SSL Offloading. The issue is that the resulting cookies have SameSite=None and do not have the Secure flag set, therefore Google Chrome blocks them, rendering login impossible. We can work around this by enabling an iRule on the virtual server.

when HTTP_RESPONSE { foreach mycookie [HTTP::cookie names] { HTTP::cookie secure $mycookie enable } }

However this iRule becomes unlinked from the vs when redeploying from the app template. Could you include this iRule as a template setting?

shyawnkarim commented 2 years ago

Thanks for submitting your issue. We are now tracking this enhancement internally with ID MYSTIQUE-455.

shyawnkarim commented 2 years ago

Closing.

This enhancement was included with Release 1.13.0.