# Kibana cookies contain "--" characters in the SID which causes the user requests to get blocked in the azure WAF **URL:** \ **Category:** Kibana\ **Created:** [October 31, 2023, 5:45am UTC](https://discuss.elastic.co/t/kibana-cookies-contain-characters-in-the-sid-which-causes-the-user-requests-to-get-blocked-in-the-azure-waf/346087 "2023-10-31T05:45:08Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![sahadev\_d](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sahadev_d/32/127082_2.png) [@sahadev\_d](https://discuss.elastic.co/u/sahadev_d)\ **Post date:** [October 31, 2023, 5:45am UTC](https://discuss.elastic.co/t/kibana-cookies-contain-characters-in-the-sid-which-causes-the-user-requests-to-get-blocked-in-the-azure-waf/346087/1 "2023-10-31T05:45:08Z")
Hi Community, We are facing issue while using kibana using with URL, Whenever the user log-in to kibana with the RBAs user creds the user gets 403 error from the kibana servers. As we debugged the issue we came to know that the user requests are getting blocked at the Azure WAF level because the cookie SID contains "--" characters in it. The message WAF states is the "SQL comment sequence detected". Is there any possible way the we can make changes in kibana to not generate cookies having "--" characters in it. Or any possible configuration that has the following option to disable cookies. Kibana verions is 8.7.0 and ES 8.7.0 . License : basic Thanks in advance ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 28, 2023, 5:45am UTC](https://discuss.elastic.co/t/kibana-cookies-contain-characters-in-the-sid-which-causes-the-user-requests-to-get-blocked-in-the-azure-waf/346087/2 "2023-11-28T05:45:44Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.