Forum Discussion

field_bad_service's avatar
field_bad_service
Icon for Altocumulus rankAltocumulus
Dec 06, 2023

How to block software information from BigIP APM

Hello everybody, I am facing a challenge with the exposure of information in Censys when using a portal via BIgIP APM. I would like to know if it is possible to restrict access or block information ...
security
zamroni777's avatar
zamroni777
Icon for Nacreous rankNacreous

if those fields comes from f5's http response header, you can try use irules or traffic policy to remove the headers

field_bad_service's avatar
field_bad_service
Icon for Altocumulus rankAltocumulus
Dec 08, 2023

Thanks for your response.


The problem is precisely this, I don't know exactly where this information is coming from, the question is along these lines, finding out where this is visible so that it can be blocked and not be something exploitable.

  • zamroni777's avatar
    zamroni777
    Icon for Nacreous rankNacreous
    Dec 08, 2023

    you can use Network tab in browser's Developer Tool to see the http details.

    tcpdump -s0 -f5 ssl ... can also give you the plain http layer data.