For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rohitbarolia's avatar
rohitbarolia
Icon for Nimbostratus rankNimbostratus
Sep 12, 2019

Encrypting password sent in http monitor

Hi,   We are using http monitor sending username, password in clear text. Is it possible to encrypt the password in http monitor, if it is not possible then what are the other options ?
application delivery
BIG-IP
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 12, 2019

Hi,

 

The only way is to use an external monitor that allow you more flexibility.

https://devcentral.f5.com/s/articles/ltm-external-monitors-the-basics

 

And in fact HTTPS/HTTP monitor use Basic Authentication.

Basic auth sends password information unencrypted, using Base64 encoding. If Basic Authentication fails, BIG-IP will then try NTLM authentication.

 

regards