Forum Discussion
小白
Cirrus
Cirruswhat's Device ID in asm?
我想知道设备ID是什么以及它是由什么组成的？比如时间，源ip，源端口……实体是什么？
Device ID is an ASM / AdvWAF feature. The BIG-IP uses JavaScript to create a device ID from client. The JavaScript tries to obtain various signals from the client to retrieve attributes like the browser type and version, installed updates, installed fonts, and others. The BIG-IP stores the device ID in the TSPD101 cookie.
This information can be used for example with brute force attack prevention or web scraping protection.
More information: https://support.f5.com/csp/article/K19556739
G-Rob
Employee
EmployeeDevice ID is an ASM / AdvWAF feature. The BIG-IP uses JavaScript to create a device ID from client. The JavaScript tries to obtain various signals from the client to retrieve attributes like the browser type and version, installed updates, installed fonts, and others. The BIG-IP stores the device ID in the TSPD101 cookie.
This information can be used for example with brute force attack prevention or web scraping protection.
More information: https://support.f5.com/csp/article/K19556739
小白G-Rob Doesn't it have anything to do with source ip and source port？I think browser information can be forged
- G-Rob
I do not see documentation where the source IP/port are used; but that doesn't mean that we do not use those values. I would reach out to support via ticket for more information.
- 小白
I need to clarify this information ,so that I can explain to my customers.
- boneyard
MVP
As Rob says actual F5 contact is the best source.
But for your worry about forging things. Mostly everything can be forged. It is about being sure enough. There is no 100% in this.
- 小白
I called, but they didn't solve my problem.
I marked this as the Accepted Solution for you. 🙂
