-
Disable specific Signature IDs from being allowed with AI/ML Model
We're seeing some signature IDs coming though we'd like to block, but AI/ML is allowing these signature IDs. Ideally we'd be able to create an exception within the console on specific signature IDs to not be evaluated by AI/ML so we can enforce th...1
-
Add integration with BIG-IP similar to iQuery for health checking of services
Today BIG-IP customers have an out of band method to inform the upstream GTM/DNS devices of the health of the services it is supporting (iQuery). XC DNS LB needs to have a similar mechanism to help determine health of services running on F5 device...4
-
Allow searching of matching criteria within route rule configuration
Currently the search function at the top of the Routes only searches the pool name assigned to each rule. It does not allow you to search for values in the header for example. If a rule has a Host header match you cannot search for that domain.0
-
Add IP prefix controls to Load Balancer routes or Add WAF policy ability of selection to service policies.
Using Service Policies we can select and exclude IPs prefixes but these controls will only apply to the WAF policy defined on the Load Balancer , for now there is no way to choose which WAF policy should or should not apply.On the other hand Route...0
-
Support for Passphrases in TLS Certificates in .crt, .cer, and .pem Formats
TLS Certificates do not currently support passphrases, so the following steps need to be taken: Issue: Invalid TLS certificate and/or Private key tls failed to parse private key. While formats such as pkcs12, p12, or pfx support passphrases, I wou...0
-
LetsEncrypt module to use highest priority domain as CN
Currently, when a certificate is issued, the LetsEncrypt module sets the CN of the certificate seemingly randomly from the domain list and all domains as SAN entries. It would be great if the CN could ALWAYS be the domain configured as priority 1 ...1
-
XC WAS - Application Tagging
Ability to add a tag to an application. The tag will help to identify the app, the environment and the version. For instance, you can scan an app in pre-prod with version 0.1, and scan the same app in production with version 1.0. What's more, if t...
0
-
Sensitive parameter masking in service policy
Challenge: F5’s API Security service persistently stores request and response bodies in XC’s GCE (log storage in France and Germany) without allowing customers to mask those request and response bodies at the edge before being sent to F5's infrast...0 Planned
-
Explain with AI for Signature Triggered Events
We have played with the new feature "Explain with AI". We have seen that in case the block is triggered by a signature ( injection, XSS, etc) it is not providing the detection context ( where it was see , what specific path triggered it, etc). The...0
-
Enable support for initial NIST PQC (Post-quantum) algorithms across the XC platform for TLS.
Competitive providers are already implementing PQC algorithms as part of their platforms. Enterprises and governments are already planning for transition and in some cases, have already implemented elements of PQC algorithms, even ahead of standar...2 Planned