Can I remove the cookie from a request at the Azure Application Gateway which has a WAF behind it?

Prithvi Kandala 0 Reputation points
2024-11-15T19:07:11.0166667+00:00

We are currently facing an issue with requests being blocked by WAF due to __hp5___meta cookie causing 403 Forbidden Errors._

This cookie is not required in our requests. So, is there a way we can remove it from the requests at the Application Gateway?

Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,087 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Rohith Vinnakota 1,245 Reputation points Microsoft Vendor
    2024-11-15T20:36:48.1833333+00:00

    Hi Prithvi Kandala,

    Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

    In the Application Gateway, you can use the HTTP header rewrite feature. This feature allows you to add, remove, or update HTTP request and response headers as the packets move between the client and backend pools.

    Note: The HTTP header and URL rewrite features are only available for the Application Gateway v2 SKU.

    Refer this link:

    Rewrite HTTP request and response headers in portal - Azure Application Gateway | Microsoft Learn

    Rewrite HTTP headers and URL with Azure Application Gateway | Microsoft Learn

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.