Forum Discussion
AltostratusF5 BIG-IP Cookie Discloses Internal IP Address
During a mooch about, I discovered that the BigIP has encoded the IP address of the web server it was acting on behalf, of within a cookie.
What have I missed to prevent this?
Encryption of the cookie?
4 Replies
nitass_89166Noctilucent
During a mooch about, I discovered that the BigIP has encoded the IP address of the web server it was acting on behalf, of within a cookie.
you mean this, don't you?
K6917: Overview of BIG-IP persistence cookie encoding
https://support.f5.com/csp/article/K6917What have I missed to prevent this?
Encryption of the cookie?
may this be useful?
K23254150: Configuring cookie encryption for BIG-IP persistence cookies from the cookie persistence profile
https://support.f5.com/csp/article/K23254150
Srini_87152Cirrostratus
Yes, as nitas said.. all you need to enable cookie encryption.
Thx Srini
- nitass
Employee
During a mooch about, I discovered that the BigIP has encoded the IP address of the web server it was acting on behalf, of within a cookie.
you mean this, don't you?
K6917: Overview of BIG-IP persistence cookie encoding
https://support.f5.com/csp/article/K6917What have I missed to prevent this?
Encryption of the cookie?
may this be useful?
K23254150: Configuring cookie encryption for BIG-IP persistence cookies from the cookie persistence profile
https://support.f5.com/csp/article/K23254150- Srini_87152
Yes, as nitas said.. all you need to enable cookie encryption.
Thx Srini
