Can ACE encrypts cookies?

[ncfb-awarsame]

I just implemented ACE 4710, A3(2.4) in our network. It is doing loadbalancing with ssl termination. I configured stickiness using server cookies.  My client is telling me cookie is sent in clear text on the Inernet.  Is there a way on ACE to encrypt it?

your help is greately appreciated.

[Gilles Dufour · Accepted solution]

This is just not possible.

The cookie is part of the http header and the complete http data (header + content) is encrypted in the same SSL connection.

So not possible.

Have your customer send you the sniffer trace showing the problem.

Gilles.

[ncfb-awarsame]

Thank you.  That was also my thinking.

I'll ask them to give a sninffer trace.

[ncfb-awarsame]

gdufuor,

a part of my question was not right. Stickiness cookie is created by ACE. ACE is inserting the cookie.  Does it make any diffirrence?

thank you.