Forum Discussion

chethan_181144's avatar
chethan_181144
Icon for Nimbostratus rankNimbostratus
Sep 14, 2017

What is the use of cookie_encrypt persistence profile ?

What is the use of cookie_encrypt persistence profile ? In which scenario do we use it ?

 

ltm persistence cookie /Common/cookie_encrypt {

 

app-service none

 

cookie-encryption preferred

 

defaults-from /Common/cookie

 

timeout 0

 

}

 

Regards , Chethan

 

BIG-IP
LTM
security

1 Reply

Sort By
  • Faruk_AYDIN's avatar
    Faruk_AYDIN
    Icon for Nimbostratus rankNimbostratus
    Sep 14, 2017

    default persistence cookie is easily decoded and someone can learn your server internal IP address. This is the one of the online F5 cookie decoders. If you use the encrypt cookie persistency, it provides encryption for persistence cookie.