fingerprint and timestamp security issue

Hi Zafer,

 

 

I don't think anything has changed since the last post on this topic (Click here). Scanners will be able to determine the OS of the serverside--whether it's LTM or the servers behind it when LTM isn't in a full proxy configuration.

 

 

I think you gain security by locking down your network and validating anything coming from the client--not obfuscating what architecture you're using.

 

 

Aaron

Hi Aaron

 

 

i thought irule can be fix this problem but i think this is tcpip problem on os level

 

 

you know we can hide web server os information but i want hide our LTM os information

 

 

you can use netcraft, nmap, nessus and find which device we have

 

 

i have case about security check to virtual address but support guys does not validate to fix this problem.

 

 

F5 box in production and everybody know which device running on customer site.

 

 

if i am bad guy and i know xxx customer have bigip and i can attack the xxx customer

 

 

thats the problem

 

 

thanks

 

 

zafer