-
URL/URI Exemption for DDOS for false positive traffic
Would like to request if URL/URI exemption can be excluded in DDOS scanning? So that specific URL/URI path will not be terminated by DDOS protection but still other URL/URI path of the website can be protected. Currently we have client wherein...0
-
Disable weak ciphers in Customer Edges
Hi, Our security team is reporting the CEs allow connections on weak ciphers. Negotiated with the following insecure cipher suites: * TLS 1.2 ciphers: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA0
-
Install Private CA cert on Customer Edges
Hi, Our security team would like us to install certs from our Private CA on the Customer Edges. The cert provided by the CEs are expired and untrusted. -
Show discovered shadow endpoints as searchable security events or some persistent searchable log
The ability to clearly understand when a shadow endpoint in an API emerges is incredibly valuable to security teams that need to understand when their attack surface changes. The API Discovery tab stops showing this information after some time and...0
-
Script Name Ambiguity
Creating this stemming from Request 354829. Please add functionality to provide additional context around scripts. Scripts are not able to be managed effectively and/or proactively block access to sensitive fields when generic script names are pro...5
-
show request ID in a custom error response
I would like to request the {{request_id} variable calls within the error response body in a custom error response.0
-
ReCaptcha V3
Hi Support, At the current moment we observed that there is no possibility in Volterra to enable a ReCaptcha V3. Due to the fact that there is only V2.0
-
Custom Rate Limit Alerts
Customer hingehealth-wdepksct has requested the following: Given a load balancer with a rate limit policy that cuts off clients I need slack notifications when aggregates of this particular kind of security event is detected. It looks like Slack r...0
-
OpenAPI Editor(Swagger)
OpenAPI validator is a powerful tool to enforce the positive API security model for organizations. XC WAAP has the capability to validate the API traffic based on the defined details of the OAS file, and this can be used very powerful security too...
0
-
Disallowed response code - upstream resp code in UI
DESCRIPTION In a log of a Disallowed response code, the upstream response code is not present in UI and present in JSON log key app_firewall_info.description. For example "description": "Disallowed response code (404)" (see attached file). SecOps ...0 Planned