Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Hamza_derbali's avatar
Hamza_derbali
Icon for Altostratus rankAltostratus
Jun 25, 2025

Brute Force Protection – Credentials in Nested JSON

Hello,

 

I am trying to configure brute force protection. In our case, the username and password are transmitted to the application through a JSON parameter called p-json.

 

How does F5 detect parameters that are nested inside another parameter? As shown below, the values of the username and password are stored under the "v" field:

 

 

 

I would appreciate your guidance on how to handle this case properly with F5.