Detect F5 BigIP
F5's BIG-IP is a family of products covering software and hardware designed around application availability, access control, and security solutions.
Detection looks at response headers, cookies across 9 fingerprint rules among the site's public responses.
01
Websites using F5 BigIP
Loading website list…
02
Signal classes
PluginView evaluates public page signals in these classes when identifying F5 BigIP. Individual fingerprint rule bodies are proprietary and are not published.
- Response headers
- Cookies
03
Example public indicators for F5 BigIP
Illustrative indicators derived from public catalog metadata for F5 BigIP. A live scan may match additional proprietary rules beyond these examples.
- server: big-?ip
- F5_HT_shrinked
- F5_ST
- F5_fullWT
- LastMRH_Session
- MRHSHint
- MRHSequence
- MRHSession
04
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known F5 BigIP signature (9 rules) at the time of the scan.
- Does not establish
- A sitewide install of F5 BigIP, an active vendor contract, exclusive use, or that F5 BigIP is still in place today.
05
How to check a site for F5 BigIP
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest F5 BigIP signals.
- 2. PluginView reads only public responses (response headers, cookies) and scores them against the F5 BigIP signature set (9 rules).
- 3. Review the confidence score and text explanation for F5 BigIP on the results page.
06
FAQ: detecting F5 BigIP
- Can PluginView detect F5 BigIP without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for F5 BigIP — typically response headers, cookies. It does not bypass authentication or paywalls.
- What category is F5 BigIP?
- F5 BigIP is classified under Reverse proxies in the PluginView directory.
- How many fingerprint rules cover F5 BigIP?
- This reference currently tracks 9 fingerprint rules across response headers, cookies. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses F5 BigIP?
- Illustrative public indicators for F5 BigIP include server: big-?ip; F5_HT_shrinked; F5_ST. A live scan may match additional proprietary rules beyond these examples.
