For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ernesto_Mayol_2's avatar
Ernesto_Mayol_2
Icon for Nimbostratus rankNimbostratus
Feb 19, 2016

Store encrypted values to be used in access policy

Here is my problem, I need to store a sensitive value (a shared secret) which I can retrieve while processing access policy to be able to compare it with the value provided by the other system that p...
BIG-IP Access Policy Manager (APM)
security
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Feb 20, 2016

You can use a sideband (irule making an HTTP request itself) connection during Access Policy execution to grab the value. You'd have to write a server-side HTTP responder, or maybe a static web page, to supply the sensitive data but maybe this isn't too difficult.

 

The trouble is that I don't believe that there is a way to store user-defined encrypted data into BIG-IP, aside from per-session user data in APM.