Forum Discussion

小白's avatar
小白
Icon for Cirrus rankCirrus
Jan 18, 2023

what's Device ID in asm?

我想知道设备ID是什么以及它是由什么组成的？比如时间，源ip，源端口……实体是什么？    
device
security
  • G-Rob's avatar
    G-Rob
    Jan 18, 2023

    Device ID is an ASM / AdvWAF feature. The BIG-IP uses JavaScript to create a device ID from client. The JavaScript tries to obtain various signals from the client to retrieve attributes like the browser type and version, installed updates, installed fonts, and others. The BIG-IP stores the device ID in the TSPD101 cookie.

    This information can be used for example with brute force attack prevention or web scraping protection.

    More information: https://support.f5.com/csp/article/K19556739

小白's avatar
小白
Icon for Cirrus rankCirrus

 G-Rob Doesn't it have anything to do with source ip and source port？I think browser information can be forged

G-Rob's avatar
G-Rob
Icon for Employee rankEmployee
Jan 19, 2023

I do not see documentation where the source IP/port are used; but that doesn't mean that we do not use those values. I would reach out to support via ticket for more information.

  • 小白's avatar
    小白
    Icon for Cirrus rankCirrus
    Jan 20, 2023

    I need to clarify this information ,so that I can explain to my customers.