For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sebastien6's avatar
Sebastien6
Icon for Altostratus rankAltostratus
Jul 27, 2019

ASM RestAPI MD5 Hash calculation

when I use the following API for eample /mgmt/tm/asm/attack-types/CdlqS-GlMoFdQYr5VfSJDg, CdlqS-GlMoFdQYr5VfSJDg based on the F5 documentation is a MD5 hash. Based on test I did on the F5 ASM, all th...
application delivery
ASM Advanced WAF
cloud
iControlREST
Sebastien6's avatar
Sebastien6
Icon for Altostratus rankAltostratus
Jul 29, 2019

well it's probably highly related to the name. The hash of ASM object in the API URL, are identical between various F5 cluster even with different TMOS version as long as the name is the same, and change only and only if the name of the object change. I made lot of testing about it and in the F5 ASM API, name == hash.

 

I can understand they don't give the code, but at least an API call where we provide the name and it return the corresponding hash can be really helpful.

  • Dario_Garrido's avatar
    Dario_Garrido
    Icon for Noctilucent rankNoctilucent
    Jul 29, 2019

    I wouldn't say that the name couldn't be involved in the calculation, but I'm sure there is something else.

     

    In your case, I would open a support-case trying to find out more info.

     

    BTW, if my last answer has helped you, I would appreciate if you mark the question as 'the best' or give me some upvotes.

     

    KR,

    Dario.

    • Dario_Garrido's avatar
      Dario_Garrido
      Icon for Noctilucent rankNoctilucent
      Aug 01, 2019

      Hello Sebastien.

       

      I know you are in the another thread, but I post this to document it for another people in the future.

       

      How to perform MD5 calculation:

      https://devcentral.f5.com/s/question/0D51T00006oGG1VSAW/asm-rest-api-sigset-id

       

      KR,

      Dario.