Forum Discussion

field_bad_service's avatar
field_bad_service
Icon for Altocumulus rankAltocumulus
Dec 06, 2023

How to block software information from BigIP APM

Hello everybody, I am facing a challenge with the exposure of information in Censys when using a portal via BIgIP APM. I would like to know if it is possible to restrict access or block information ...
security
zamroni777's avatar
zamroni777
Icon for Nacreous rankNacreous
Dec 06, 2023

if those fields comes from f5's http response header, you can try use irules or traffic policy to remove the headers

  • field_bad_service's avatar
    field_bad_service
    Icon for Altocumulus rankAltocumulus
    Dec 08, 2023

    Thanks for your response.


    The problem is precisely this, I don't know exactly where this information is coming from, the question is along these lines, finding out where this is visible so that it can be blocked and not be something exploitable.

    • zamroni777's avatar
      zamroni777
      Icon for Nacreous rankNacreous
      Dec 08, 2023

      you can use Network tab in browser's Developer Tool to see the http details.

      tcpdump -s0 -f5 ssl ... can also give you the plain http layer data.