For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

david_ad_339166's avatar
david_ad_339166
Icon for Nimbostratus rankNimbostratus
Feb 06, 2018

Encrypt Server Cookie

Hi,   Is there any option to encrypt the cookie that generated by the server that sent to clients?  
LTM
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Feb 06, 2018

Yes, you can do this in the HTTP profile. See Configuring cookie encryption within the HTTP profile (10.x - 13.x)

You can configure the BIG-IP LTM system to encrypt HTTP cookies before sending them to the client system. The BIG-IP LTM system can encrypt BIG-IP persistence cookies, **as well as cookies that are embedded in the response from the server**.

You have to enter a list of cookie names in the HTTP profile.

Hope this helps,

N