For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nick_T_68319's avatar
Nick_T_68319
Icon for Nimbostratus rankNimbostratus
Apr 03, 2014

Virtual Server Syncookie Status

I was just reading SOL14805 about Configuring Syncookie protection. All my virtual servers are using the TCP WAN Optimized profile on the client side, which has Hardware SYN Cookie Protection enable...
application delivery
LTM
management
security
rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Apr 03, 2014

From my reading of Sol 14805, the value of the 'Syncookie Status' is not an indication of the feature being configured or enabled, but rather if the feature is in use. In other words, if your device isn't under SYN-Flood, the Syncookie Status of a virtual server will always be off.

 

The wording is a bit confusing, I have to admit: "Off: The SYN cookie feature is not currently active for the virtual server."