Bug ID 761049: APM does not support adding SameSite cookie attribute to APM cookies.

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
13.1.1,,,,, 13.1.3,,,,,,, 13.1.4,, 13.1.5,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,, 15.1.9,, 15.1.10,,,

Fixed In:

Opened: Mar 12, 2019

Severity: 3-Major


The Chrome browser version 80 changes the way it treats the SameSite cookie attribute to be complaint, according to https://tools.ietf.org/html/draft-west-cookie-incrementalism-00. In this case, if the server does not set the SameSite cookie attribute, the browser treats the cookie attribute as equivalent to 'samesite=Lax', which changes the behavior of how the cookie is shared with the domain that did not originally set the cookie.


The latest browser (e.g., Chrome 80) stops sending the APM cookie back to the different domain, if it does not find the SameSite cookie attribute for APM cookies.


APM is configured.


Use a custom iRule to add the SameSite cookie attribute to the APM cookies in HTTP_RESPONSE_RELEASE.

Fix Information

APM now supports adding SameSite cookie attribute to APM cookies.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips