-
Selectively enable CVE signatures
There is only on or off for "threat campaigns" or CVE attack signatures. This does not make any sense.0 Planned
-
Allow disabling L7 DDoS per load-balancer
While we typically want this protection, it is not acceptable to have a feature forcibly and permanently enabled that we have no control over. -
LetsEncrypt module to use highest priority domain as CN
Currently, when a certificate is issued, the LetsEncrypt module sets the CN of the certificate seemingly randomly from the domain list and all domains as SAN entries. It would be great if the CN could ALWAYS be the domain configured as priority 1 ...1
-
Matching criteria with Negation/Not on policies
For example country match in rate limit policy, only allows selection of countries with a limit. thus multiple policies will be required if customer would like to exclude all countries except for a few countries. for less complication, matcher fie...0
-
Disable specific Signature IDs from being allowed with AI/ML Model
We're seeing some signature IDs coming though we'd like to block, but AI/ML is allowing these signature IDs. Ideally we'd be able to create an exception within the console on specific signature IDs to not be evaluated by AI/ML so we can enforce th...1
-
Enable support for initial NIST PQC (Post-quantum) algorithms across the XC platform for TLS.
Competitive providers are already implementing PQC algorithms as part of their platforms. Enterprises and governments are already planning for transition and in some cases, have already implemented elements of PQC algorithms, even ahead of standar...2 Planned
-
Allow searching of matching criteria within route rule configuration
Currently the search function at the top of the Routes only searches the pool name assigned to each rule. It does not allow you to search for values in the header for example. If a rule has a Host header match you cannot search for that domain.0
-
Audit Log Alerting - non-SSO log in
There is a risk concern around the ability of a tenant admin to log in directly or through SSO (Oauth) to our tenant. I would like the ability to alert when a non-SSO log in occurs as we adopt a policy that non-SSO log in is only performed for eme...0
-
If XC cannot enforce TLS Security Level, provide warning message
We recently ran into this issue: https://f5cloud.zendesk.com/hc/en-us/articles/24793738208151-Why-is-TLSv1-0-1-1-enabled-for-F5-XC-HTTP-LB-even-though-TLS-setting-is-High When the same certificate is used for multiple Load Balancers on the same VI...0
-
show assigned tenant IP address under "Tenant Overview"
Would be great if you could show the tenant assigned public IP address as follows: Tenant ID: <tenant name> Your domain: <tenant name>.console.ves.volterra.io Company Name: <name> Public IP: <public assigned ip address> Tha...0