For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

zafer's avatar
zafer
Icon for Nimbostratus rankNimbostratus
May 06, 2009

fingerprint and timestamp security issue

Hello     i tested some bigip system vip address and i got timestamp and fingerprint information about system.     i found two solution on ask.f5.com   https://support.f5.co...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 06, 2009
Hi Zafer,

 

 

I don't think anything has changed since the last post on this topic (Click here). Scanners will be able to determine the OS of the serverside--whether it's LTM or the servers behind it when LTM isn't in a full proxy configuration.

 

 

I think you gain security by locking down your network and validating anything coming from the client--not obfuscating what architecture you're using.

 

 

Aaron