Forum Discussion

david_ad_339166's avatar
david_ad_339166
Icon for Nimbostratus rankNimbostratus
Feb 06, 2018

Encrypt Server Cookie

Hi,

 

Is there any option to encrypt the cookie that generated by the server that sent to clients?

 

  • Yes you can. When you create cookie persistence profile, you can select the option to encrypt the cookie and you will also have to provide the passphrase. Once this profile is created, you can call it in the resources option.

     

  • Yes you can. When you create cookie persistence profile, you can select the option to encrypt the cookie and you will also have to provide the passphrase. Once this profile is created, you can call it in the resources option.

     

  • Yes you can. When you create cookie persistence profile, you can select the option to encrypt the cookie and you will also have to provide the passphrase. Once this profile is created, you can call it in the resources option.

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    Yes, you can do this in the HTTP profile. See Configuring cookie encryption within the HTTP profile (10.x - 13.x)

    You can configure the BIG-IP LTM system to encrypt HTTP cookies before sending them to the client system. The BIG-IP LTM system can encrypt BIG-IP persistence cookies, **as well as cookies that are embedded in the response from the server**.

    You have to enter a list of cookie names in the HTTP profile.

    Hope this helps,

    N