For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

alchancco's avatar
alchancco
Icon for Nimbostratus rankNimbostratus
Jul 08, 2022

irule to replace Realm value for http response header WWW-Authenticate: Basic realm="IP address"

To mitigate against internal IP address disclosure in Basic Authentication Header, i'd like to change the IP address to some other value. I tried changing "Basic Auth Realm" in http profile but it o...
application delivery
devops
event
security
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Jul 10, 2022

Hi alchancco,

Can you change the http event and try?

when HTTP_RESPONSE_RELEASE {
	if { [HTTP::header WWW-Authenticate] starts_with "Basic" }{
		HTTP::header replace WWW-Authenticate "Basic realm='mydomain.com'"
	}
}

 

alchancco's avatar
alchancco
Icon for Nimbostratus rankNimbostratus
Jul 21, 2022

HI Enes_Afsin_AI,

I made the change  but as before it only changes the header value  sporadically.

- alfredo