Forum Discussion

小白's avatar
小白
Icon for Cirrus rankCirrus
Jan 18, 2023
Solved

what's Device ID in asm?

我想知道设备ID是什么以及它是由什么组成的？比如时间，源ip，源端口……实体是什么？

 

 

device
security
  • G-Rob's avatar
    G-Rob
    Jan 18, 2023

    Device ID is an ASM / AdvWAF feature. The BIG-IP uses JavaScript to create a device ID from client. The JavaScript tries to obtain various signals from the client to retrieve attributes like the browser type and version, installed updates, installed fonts, and others. The BIG-IP stores the device ID in the TSPD101 cookie.

    This information can be used for example with brute force attack prevention or web scraping protection.

    More information: https://support.f5.com/csp/article/K19556739

12 Replies

Sort By
  • G-Rob's avatar
    G-Rob
    Icon for Employee rankEmployee
    Jan 18, 2023

    Device ID is an ASM / AdvWAF feature. The BIG-IP uses JavaScript to create a device ID from client. The JavaScript tries to obtain various signals from the client to retrieve attributes like the browser type and version, installed updates, installed fonts, and others. The BIG-IP stores the device ID in the TSPD101 cookie.

    This information can be used for example with brute force attack prevention or web scraping protection.

    More information: https://support.f5.com/csp/article/K19556739

    • 小白's avatar
      小白
      Icon for Cirrus rankCirrus
      Jan 19, 2023

       G-Rob Doesn't it have anything to do with source ip and source port？I think browser information can be forged

      • G-Rob's avatar
        G-Rob
        Icon for Employee rankEmployee
        Jan 19, 2023

        I do not see documentation where the source IP/port are used; but that doesn't mean that we do not use those values. I would reach out to support via ticket for more information.