For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hamza_derbali's avatar
Hamza_derbali
Icon for Altostratus rankAltostratus
Jun 25, 2025

Brute Force Protection – Credentials in Nested JSON

Hello,

 

I am trying to configure brute force protection. In our case, the username and password are transmitted to the application through a JSON parameter called p-json.

 

How does F5 detect parameters that are nested inside another parameter? As shown below, the values of the username and password are stored under the "v" field:

 

 

 

I would appreciate your guidance on how to handle this case properly with F5.

application delivery
security