Forum Discussion

Erika_I_Garner's avatar
Erika_I_Garner
Icon for Altostratus rankAltostratus
Jun 19, 2019

How Often does the ASM Known Leak Credentials gets updated?

How Often does the ASM Known Leak Credentials gets updated? How does F5 gets this information?

 

Thank you,

 

Erika

1 Reply

  • Hi Erika,

     

    The ASM uses a database of hashed username/password pairs to implement its checks for leaked credentials. The usernames and passwords themselves are not stored on the ASM. The hashes are built from records sourced from multiple databases of compromised usernames and passwords with over a billion entries in total. This database is maintained by the Product Development team but does not have a specific update cycle. Instead, the database is simply updated as more compromised credentials are released.

     

    I hope this helps.