For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Grepps_264's avatar
Eric_Grepps_264
Icon for Nimbostratus rankNimbostratus
Nov 14, 2006

Encrypt URL's and querystrings

I know about the SSN and credit card scrubber, but is it possible to search the payload for http href's and replace them with an encrypted string them decrypt it on the way back in.     We have ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 15, 2006
Hi,

 

 

You should be able to use the credit card scrubber rule (Click here) as an example for inspecting and replacing the HTTP response content. You could search for the URLs/URIs in the response content and use the AES functions (Click here) to encrypt the content. On subsequent responses, you could use HTTP::header or HTTP::uri to decrypt the strings.

 

 

If there is sensitive data in the HTTP response headers, you would need to en/decrypt that seperately using the HTTP::header functions (Click here).

 

 

Try starting with this and repost with any questions.

 

 

Aaron