Background:
There is a requirement for a non-prod environment where the presence of the same cookie name in the response of EdgeUI is causing an overlap with F5/WAF. This overlap is leading to blocked requests and security violations. We aim to reproduce this issue without the presence of F5/LB in order to investigate further.
Goal:
Our goal is to set up the existing environment, consisting of Edge-UI and SSO, in a lower sandbox environment without a Load Balancer. This will help us verify if the issue can be reproduced without LB.
Request:
I kindly request your support in providing an access requirements and port details for direct access to EdgeUI, Classic UI, and Management UI in the existing UAT setup(5 nodes setup). We want to ensure that we can replicate the issue without the use of F5 Load Balancer or not.
Additional Context:
We have already confirmed that the issue occurs when LB/WAF is in place on prod environment, and the cookie injection is directly being produced from Apigee.
To thoroughly investigate and understand the scenario, we need to eliminate the LB factor and want to reproduce the issue in a lower environment without a load balancer.
Quick assistance on this matter would be highly appreciated.
Looking forward,
LinkedIn
Twitter
