For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chethan_181144's avatar
chethan_181144
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

What is the use of cookie_encrypt persistence profile ?

What is the use of cookie_encrypt persistence profile ? In which scenario do we use it ?

 

ltm persistence cookie /Common/cookie_encrypt {

 

app-service none

 

cookie-encryption preferred

 

defaults-from /Common/cookie

 

timeout 0

 

}

 

Regards , Chethan

 

BIG-IP
LTM
security

1 Reply

  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Altostratus rankAltostratus
    Sep 14, 2017

    default persistence cookie is easily decoded and someone can learn your server internal IP address. This is the one of the online F5 cookie decoders. If you use the encrypt cookie persistency, it provides encryption for persistence cookie.