-
Please support CRL settings on REs (Regional Edges)
We would like to have a feature implemented that makes it possible to set CRLs on HTTP LBs that use Public Advertisements, that is, HTTP LBs with "Internet" VIP Advertisements. Currently, CRL settings are not supported on REs (Regional Edges) a...0
-
F5XC - JS and Captcha challenge customisation page
F5 Distributed Cloud WAAP to support customization of the following items: - JavaScript challenge interstitial page - Captcha challenge. Customization currently supported is pretty limited, and not enough for the customer needs. New customization...
1
-
F5XC - Allowed-IP dynamic lists
Distributed Cloud allowed-IP dynamic lists: check periodically the IP addresses (/24) of an allowed-IP list and remove from the list those member IPs for which the platform has not received traffic during a configurable period of time (e.g. during...
0
-
Brute Force and Malicious User - skip processing except for the login page
Context After having detecting and mitigating a automation request with Bot Defense, Malicious User (MU) can prevent any further automation request from the same User Identifier. The benefit is that MU doesn't charge mitigated requests but Bot Def...0
-
On CE, would like to be able to access Load Balancer by IP
For HTTP and HTTPS Load balancers, would like to be able to bypass the hostname checking so they can be access by IP. I realize, at least for HTTPS, this could cause some certificate errors for the client. We have internally hosted sites hosted on...0
-
Integrate BNK/CNF tmm with XC managment so it can be used for L3 MCN only use cases
We have a several customers who want to use XC Mesh/MCN as a way to reduce time and effort to connect apps across large and complex underlay networks. For example one service provider requires 6+ months to deploy a new customer application because...
0
-
Route Requests from CE to ibd API via CE<>RE VPN tunnels
Currently the required outbound connections from the CE to the internet are listed here https://docs.cloud.f5.com/docs-v2/platform/reference/network-cloud-ref#new-secure-mesh-v2-sites These do not include the FQDNs for bot defense like ibd-webemea...0
-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1
-
Separate Management Interface for CE so it can operate with option of not building a tunnel to RE's
Have a deployment option of CE clusters where there is a separate management interface that can communicate with XC portal/management/configuration/reporting but CE building IPSEC/SSL tunnels to RE should be optional. This will enable CE's to be r... -
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...0