For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chethan_181144's avatar
chethan_181144
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

What is the use of cookie_encrypt persistence profile ?

What is the use of cookie_encrypt persistence profile ? In which scenario do we use it ?   ltm persistence cookie /Common/cookie_encrypt {   app-service none   cookie-encryption preferred...
BIG-IP
LTM
security
Faruk_AYDIN's avatar
Faruk_AYDIN
Icon for Altostratus rankAltostratus
Sep 14, 2017

default persistence cookie is easily decoded and someone can learn your server internal IP address. This is the one of the online F5 cookie decoders. If you use the encrypt cookie persistency, it provides encryption for persistence cookie.