For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pjcampbell_7243's avatar
pjcampbell_7243
Icon for Cirrus rankCirrus
Apr 22, 2011

Failing PCI DSS for cookie insert

The cookie insert is showing the internal IP of my pool members. Is there a way to do F5 generated cookie persistence without displaying this info?     this is the info they were able to get: ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 22, 2011
Hi PJ,

 

 

You can encrypt the persistence cookie using a custom HTTP profile with the cookies to encrypt set to the persistence cookie name.

 

 

Aaron