-
cert-manager support
Use Case: Certificate Life Cycle Management and support any ACME issuer Proposition: contribute to Cert-Manager community to provide F5 XC support. Competition: supported by Cloudflare and Akamai https://cert-manager.io/docs/configuration/acme/dns...0
-
F5XC - WAF blocking page for JSON payload - AJAX response
F5XC WAF blocking page does not support JSON content type. We need to support it similar to AWAF AJAX blocking page.
1
-
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
1
-
F5XC - IP Geolocation database weekly update
Improve the Distributed Cloud IP Geolocation database update period from every 1-2 months to weekly, as we currently do for BIG-IP ASM.
0
-
Integrate Google Chronicle with Global Log Receiver
Some of the customers use Google Chronicle as a log receiver and currently, it has been confirmed that this log receiver is not supported by the GLR service.0
-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1
-
Separate Management Interface for CE so it can operate with option of not building a tunnel to RE's
Have a deployment option of CE clusters where there is a separate management interface that can communicate with XC portal/management/configuration/reporting but CE building IPSEC/SSL tunnels to RE should be optional. This will enable CE's to be r... -
Allow regex or simple pattern match on header and query parameter names
Regex matching is only configurable in service policies and routes based on header/query parameter values. Only exact, case-sensitive header names can be used. You cannot drop all requests with a pattern of headers like: "badHeader: aaa" "dfghbadH...0
-
F5XC - Allowed-IP dynamic lists
Distributed Cloud allowed-IP dynamic lists: check periodically the IP addresses (/24) of an allowed-IP list and remove from the list those member IPs for which the platform has not received traffic during a configurable period of time (e.g. during...
0
-
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...0