Leslie_South_55
Aug 14, 2007Nimbostratus
Encrypt the BIGip cookie + cookie insert
I have found some good examples of encrypting cookies with an iRule, but from what I read (if I am reading it correctly) it does not seem that anyone is encrypting the cookie inserted by the BIGIP itself? I use cookie_insert for persistence and a recent vulnerability assessment noted that the node and port number can be easily obtained by decoding the cookie value. Is it possible for me to encrypt the cookie that the BIGIP is inserting?
-L