For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nap_65765's avatar
Nap_65765
Icon for Nimbostratus rankNimbostratus
Aug 17, 2012

TM+ASM Integration with Cybersource Device Fingerprinting Application

Hi All.

 

 

Does anybody have experience integrating F5 with Cybersource's Device Finger Printing Application?

 

 

 

One of my customer has an online application of which they have a Device Finger Printing application from Cybersource residing in their web server which allows Cybersource to detect device information and mitigate credit card fraud for online orders..that is if Cybersource detects that multiple transactions are being received by their online application using various credit cards from the same device (MAC Addresss/IMEI No) then the Cybersource will instruct the web server to immediately block the transactions and flag their Anti-Fraud/Trust group.

 

 

 

Since the customer is planning to buy LTM-ASM, they want us to be able to integrate it with Cybersource so that if Cybersource detects a possible fraud transaction it will also send the instruction to F5 so it will also block all transactions from those flagged devices.

 

 

 

Cheers.

 

Nap

 

application delivery
dev
devops
iRules

1 Reply

  • Ben_Cuthbert_90's avatar
    Ben_Cuthbert_90
    Historic F5 Account
    Oct 11, 2012

    Hi Nap,

     

     

    Yeah it should be possible, depending on how you can get the data from Cybersource. If they can update a file then you can perhaps use the iFile capability, examples here.

     

     

    Another option might be a class/datagroup, details here.

     

     

    The one thing to be careful of is if the data is going to be source IP addresses, that Cybersource is not going to block clients connecting through transparent proxies etc. A better way to do it might be via sessionID's or something more reliable.

     

     

    Hope that helps.