For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JohnnySV's avatar
JohnnySV
Icon for Nimbostratus rankNimbostratus
Sep 28, 2023

How does F5 Protect from Token Theft

We currently use F5 to establish secure connections to our remote desktop sessions for remote users. These users are using their personal machines so we dont provide any additional NextGen AV protect...
security
PSFletchTheTek's avatar
PSFletchTheTek
Icon for Cumulonimbus rankCumulonimbus
Sep 29, 2023

Hi, 

Which functions / modules are you using?
APM and AWAF could possibly be used to look for more than cookies.
So cookies and say orginating IP. So if the IP changes it might have been hijacked.

But if someone is on a mobile connection which could have its IP changed mid-session this may course other issues.

If you're using APM - you could look at client cert verification, or the agent to try to be more comfortable that your connection isn't hijackable.