-
Ability to test container registrys
When adding container registries, it would be nice to have a login/password test function at creation time.0
-
Filter: re-use a filter key + choose "OR"
From customer feedback, lack in WAAP Security Analytics Events dashboard are:- re-use a filter. Use Case: filter on multiple IPs - choose "OR", in spite of "AND" by default. Use Case: filter on multiple IPs3
-
I would like the error content output by component down in F5XC to be modified.
【Issue】Errors (e.g., 503 errors) when using F5XC HTTPLB have specifications that make it difficult for end users to understand what is happening.(Normally, there should be a message that the server is down, etc., but if the error is for F5XC as a ...1
-
F5 XC logs integration with Forti SIEM
Dear Team, We have a requirement to integrate WAF DXC logs (security events, request & access) with our Forti SIEM solution.During Migration call, we got to know SIEM integration is possible with this new WAF DXC platform. So I raised the case...0
-
JWT claim based policy
The recent XC WAAP release supports the JWT discovery and extracts the claims from the token. It could be powerful to stop access control-related attacks if we can set the policy based on JWT claims in XC WAAP. For example, if the user's group inf...
0
-
Nomenclature Change
Can we limit the nomenclature changes? In cases of enablement, the nomenclature changes confuses the attendees who are trying to come up to speed with the product. This majorly affects the channel partners in pockets of APAC, where English is not ...0
-
XC Delegated Access should create audit record in mangemed tenant when accessed from operating tenant
As it stands today, when a user from an operating tenant accesses a managed tenant, no audit record is created on the managed tenant. This, to me, creates a security blindspot and XC should generate an audit entry on the managed tenant, when acces...0
-
OWASP API-09 | zombie API filter
A zombie API, or forgotten API, is an API endpoint that is in "Inventory" and not "Discovered". Could we add this filter in "API endpoints" dashboard? This feature would be usefull for OWASP API-09 Improper Assets Management -
App_Firewall_info section in Global Log Receiver messages
App Firewall security event include a section called app_firewall_info. This section is available via the Security Event (json). But in a Global Log Receiver type Splunk (not checked with others), it is not included. "app_firewall_info" : { "name"...
1
Will not implement
-
Customise Health checks with HTTP METHODS Selection ability
Sometimes the origin server requries a specially crafter request for the health check to work, and many times the HTTP method is controlled by the origin server and rejects any other method.0