For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jinshu's avatar
Jinshu
Icon for Cirrus rankCirrus
Dec 11, 2015

Encrypt Cookie Name- Starts with BIGipServer

Hi All,

I am trying to encrypt cookie usign an irule. I am able to encrypt the cookie value but the cookie name exists.

The cookie i am refering is the big ip cooke starts with 

BIGipServer
. It says to the client about the pool name , iapp name etc which is looks good but not good for security.

Can we encrypt the cookie name as well?

-Jinshu

BIG-IP
security

3 Replies

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Dec 11, 2015

    BIGipserver is the default name for a persistence cookie. You can change the name in the cookie persistence profile by customizing the "Cookie Name" field. The profile can also encrypt the cookie content.

     

  • Rick_W__359594's avatar
    Rick_W__359594
    Icon for Nimbostratus rankNimbostratus
    Apr 24, 2018

    If I change the cookie name to, for example, MyNewCookieName, will the name become static, or is it just change the prefix from BIGipServer[pool name] to MyNewCookieName[pool name]?

     

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Apr 26, 2018

    Rick,

     

    The cookie name you configure replaces the entire default name including the pool.