-
Allowed for multiple SSO providers
Distributed Cloud customers often have multiple directories that they would like to link to a single tenant. For example, a customer may have one AAD environment for Dev, and another for Prod. Or some may have PCI, and non-PCI.2
-
WAF exclusion rule to be reused by multiple LB
Customer doing PoC and request to re-use WAF exclusion rules in a global level, as current settings require customer to create WAF exclusion policy on LB level.0
-
URL/URI Exemption for DDOS for false positive traffic
Would like to request if URL/URI exemption can be excluded in DDOS scanning? So that specific URL/URI path will not be terminated by DDOS protection but still other URL/URI path of the website can be protected. Currently we have client wherein...0
-
Disable weak ciphers in Customer Edges
Hi, Our security team is reporting the CEs allow connections on weak ciphers. Negotiated with the following insecure cipher suites: * TLS 1.2 ciphers: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA0
-
Install Private CA cert on Customer Edges
Hi, Our security team would like us to install certs from our Private CA on the Customer Edges. The cert provided by the CEs are expired and untrusted. -
Greater control of Let's Encrypt certificates
When auto generating certificates from Let's Encrypt it would be helpful to be able to define the certificate parameters. For example, defining key length, signing algorithm and certificate duration would give teams greater control. It would also ...0
-
Show discovered shadow endpoints as searchable security events or some persistent searchable log
The ability to clearly understand when a shadow endpoint in an API emerges is incredibly valuable to security teams that need to understand when their attack surface changes. The API Discovery tab stops showing this information after some time and...0
-
Script Name Ambiguity
Creating this stemming from Request 354829. Please add functionality to provide additional context around scripts. Scripts are not able to be managed effectively and/or proactively block access to sensitive fields when generic script names are pro...4
-
ReCaptcha V3
Hi Support, At the current moment we observed that there is no possibility in Volterra to enable a ReCaptcha V3. Due to the fact that there is only V2.0
-
Custom Rate Limit Alerts
Customer hingehealth-wdepksct has requested the following: Given a load balancer with a rate limit policy that cuts off clients I need slack notifications when aggregates of this particular kind of security event is detected. It looks like Slack r...0