Manual Chapter : Setting a replacement value for a URL parameter that is not encrypted

Applies To:

  • BIG-IP FPS

    21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.0

Updated Date: 07/07/2026

Setting a replacement value for a URL parameter that is not encrypted

Setting a replacement value for a URL parameter that is not encrypted is only relevant to URL parameters that have been marked with the Enforce attribute.

If the BIG-IP system detects that the value of a URL parameter marked with the Enforce attribute is not encrypted, it replaces the value with an empty string and sends that to the customer’s server. This empty string might cause a system error on the customer’s server. To avoid this problem, you can set your own replacement value to be used instead of the default empty string.

  1. Connect to the BIG-IP system with the ssh command.

  2. Set a replacement value for a URL parameter that is not encrypted with the following command:

    tmsh modify sys db antifraud.mobilesafe.entangledgarbage *<value>*

    where <value> is the replacement value.