-
File Type Control in F5 Distributed Cloud WAAP similar to BIG-IP Advanced WAF
We request an enhancement in F5 Distributed Cloud (XC) WAAP/WAF to provide granular File Type control, similar to the File Types functionality available in F5 BIG-IP Advanced WAF. In the on-premises F5 WAF, security policies can be configured to a... -
Share Configuration -> Public IP Addresses, Preventing virtual site assignment to no value.
Under the Shared configuration for Public IP Addresses, the `ves-io-all-res` Virtual Site is currently assigned to all public IP addresses. If this Virtual Site assignment is accidentally removed, traffic from all load balancers using the affected... -
Expand JA4 Fingerprint Matching in Service Policy
JA4 TLS Fingerprints are comprised of three separate hashes to distinctly separate a clienthello's cipher suites and extensions from version/etc. In Service Policy client matching, clients can only be matched on the entire JA4 string. Idea: In add... -
j.triolet@f5.com
There is currently only a way to exempt signatures from detection but no way to block a single low signature -
Rate Limit custom response page
Without it, clients that are hit with the limit are left clueless on how to contact us. -
Enhance CE upgrade procedure and create rollback procedure
We had a production incident after upgrading a CE cluster. The CE nodes couldn't communicate with the backends. We would like to have the possibility to upgrade only one node of the cluster and test if the application traffic is still flowing norm... -
To provide a customer accessible button to acknowledge or clear site alerts
Allow customers to acknowledge or dismiss a Site Heartbeat Down alert. Support clearing alerts associated with decommissioned or replaced nodes. Ensure that acknowledging the alert does not affect the replacement nodes or the existing site con... -
Custom Error Response Page for Threat Mesh block
Hello I'd like Threat Mesh to use the custom Error Response page configured on the LB. We've had some false positives where customers don't know how to react. Regards Peter -
Certificate expiration alerting - Alerting needs to say the exact count of days before expiration
Currently certificate expiration alerts describe "TLS Custom Certificate for virtual host <name> expires in less than 15 days". Customer would like the exact number of days until expiration for each certificate to be reported rather than all...
Planned
-
F5 XC HTTP Load Balancer – Display Configured FQDN in WAF Exclusion Rules Domain Column
Feature Area: Web App & API Protection → HTTP Load Balancer → WAF Exclusion Rules Request Type: GUI Enhancement / Usability Improvement Description When viewing the WAF Exclusion Rules configured under an HTTP Load Balancer in the F5 Distribut...
