-
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr...1
-
Threshold-based DataGuard for BOLA Prevention
Threshold-based DataGuard for BOLA Prevention 1) Why? BOLA(Broken Object Level Authorization) is the #1 API attack in the OWASP API Top 10. While the attack is now quite well-known, preventing it is still difficult because of its logic. 2) 3 attac...
0
-
Customize the block page of service policy
The feature is missing because when a client will be block by the Service Policy he will know that the service's traffic is through F5 and which PoP is answering right now for the request. It's unsecure for some customers.0
-
Login error should be notified in multiple selectable ways.
When login fails, a Login error e-mail is sent to the account that failed to login. ********(e-mail sample) Login error A failed login attempt was detected to your account on Mon Nov 11 04:11:54 UTC 2024. If this was not you, please contact F5 sup...0
-
Separate Management Interface for CE so it can operate with option of not building a tunnel to RE's
Have a deployment option of CE clusters where there is a separate management interface that can communicate with XC portal/management/configuration/reporting but CE building IPSEC/SSL tunnels to RE should be optional. This will enable CE's to be r... -
Adding F5 Big IP telemetry to XC (similar to https://demo.nginx.com/)
Having a huge F5 big IP customers using exclusively F5 SWonHW products and not exposed to XC, is an opportunity for F5 if we manage to provide added value for Visibility of their deployments as a whole and getting alerts, telemetry and recommendat...0
-
Show Route Advertise status on Dashboard
We cannot see the Route Advertise status of Routed DDoS on Dashboard. (I can only see the name and prefix right now) I would like this status added to the dashboard.0
-
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...0
-
Allow scheduled backup / snapshotting of LB configuration
When troubleshooting a loadbalancer configuration, root cause analysis should always include the question, "for how long has this setting been enabled, and why was that done?" Far too often, searching backward through audit logs for LB configurati...0
-
Link Origin Servers "Unhealthy" to origin view showing all of the unhealthy origins.
It would be helpful to have a link from the Home > Multi-Cloud App Connect > namespace > Overview > Performance > Http/TCP > HTTP/TCP Load Balancer: %lbname% that if you were to click on Unhealthy it would take you to the Origin ...0