-
Threshold-based DataGuard for BOLA Prevention
Threshold-based DataGuard for BOLA Prevention 1) Why? BOLA(Broken Object Level Authorization) is the #1 API attack in the OWASP API Top 10. While the attack is now quite well-known, preventing it is still difficult because of its logic. 2) 3 attac...
0
-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1
-
Separate Management Interface for CE so it can operate with option of not building a tunnel to RE's
Have a deployment option of CE clusters where there is a separate management interface that can communicate with XC portal/management/configuration/reporting but CE building IPSEC/SSL tunnels to RE should be optional. This will enable CE's to be r... -
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...0
-
Request logs to show http route selected
Challenge: When using complex custom routes to direct traffic, it is hard to know with certainty which routes are being selected for inbound traffic. This can lead to a fear to touch or modify existing routing policies as there is a risk of disrup...0
-
Create an API Gateway, API management tool & API security solution to manage & protect APIs
Implement a full API Gateway within XC to provide API gateway functionality, management of customer APIs, and act as an API security solution. I.E. an XC one-stop shop for APIs. This would reduce or avoid tacking on other numerous API Gateway solu...0
-
Support for Waiting Room
Some customers are looking for a function similar to Cloudflare's Waiting Room (https://www.cloudflare.com/waiting-room). This allows to gracefully limit number of users during peak hours, asking them to check and provide access whenever possible.
3
-
JSON-formatted IP Address list of the F5 ADN
F5 needs to establish a public API endpoint capable of returning JSON-formatted responses for the IP ranges, rather than the current provision of a text file containing the F5 ADN IP list. This allows customers to programmatically retrieve the IP ...3
-
Add integration with BIG-IP similar to iQuery for health checking of services
Today BIG-IP customers have an out of band method to inform the upstream GTM/DNS devices of the health of the services it is supporting (iQuery). XC DNS LB needs to have a similar mechanism to help determine health of services running on F5 device...4
-
Route info in LB view
Load Balancers with dozens of routes are hard to troubleshoot due to no info in the GUI/console. Customers are required to manually check JSON but it's hard to find a corresponding L7 route. Updating Routes view with configured settings (such as h...1 Planned