For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Abdou76's avatar
Abdou76
Icon for Cirrus rankCirrus
Aug 23, 2024

Vulnérabilités divulgation d'informations

Hi When i scan my website with Nmap, the résults show that's a Bigip device behind my server. How Can i eliminate this information disclosure vulnérability.? Thanks.
security
Aswin_mk's avatar
Aswin_mk
Icon for MVP rankMVP
Aug 23, 2024

I hope your F5 device had done hardening. F5 only need to be accessible from restricted network and other self ip should be allow none if it's not HA interface. You can search F5 hardening document F5 from unauthorised access and make it secure.

Abdou76's avatar
Abdou76
Icon for Cirrus rankCirrus
Aug 24, 2024

 

Hi thanks you for your réponse 

I think I didn't explain it well. Actually, the F5 is not accessible, but during a penetration test on my website, the F5 effectively blocks the attacks. However, the attacker knows it's an F5 firewall, for example, through NMAP when I run commands on the public IP. I think I need to hide the word 'Bigip' in the HTTP header, but how do I do that?