-
Provide the ability to toggle WAF base64 encoding on/off
Be able to define an exception or an option, so that customers can define something like: If FQDN == www.example.com && URI == /parent/directory/filename.com && Parameter == example --- THEN do not decode Base64
-
Provide Recommendations For XC configurations
Provide useful recommendations for items that could or should be configured, like health montiors or moving WAF from monitoring to blocking etc. See example attached -
Show mapping for full workload/load balancing, CE workloads for App Map view
Make it look like this. I can show you how I did it/ -
API Protection/Validation - Allow empty values by default for non-mandatory discovered parameters/headers
Problem: When a parameter or header is identified through API Discovery and is not marked as mandatory, the system currently does not allow that field to accept an empty value by default. This forces users to manually edit the API definition just ... -
Add configurable header authentication for HTTP Receiver in GLR
The token authentication option inserts "Bearer" before the token the user configures. While this is typical, not all APIs authenticate with an Authorization header with a value of "Bearer xxxxxxxxxxxxxxxxx". The GLR configuration should not naive... -
Product Enhancement Request – Granular Trusted Client Whitelisting
Dear Team, We would like to suggest a product enhancement for the Trusted Client configuration. Currently, under Trusted Client, we have broad categories such as Skip IP Reputation. However, instead of whitelisting the entire category, it would be... -
Feature Request to Support Computed/Client Certificate Fingerprint insertion into a HTTP Header
Hi F5 Team, We came across scenarios where certain Applications expect the fingerpint of the Client Certificate itself to be included into the HTTP header. As of now, the F5 Distributed SaaS WAF doesn't quite support this functionality, other part... -
Hash-based grouping of identical inline scripts
We have observed the following behavior in Client-Side Defense monitoring: Each online transaction page is generated with a unique identifier in the URL, for example: https://www.example-company.com/online-process/unique-session-id.html Although t... -
Log Pre-Processing and Optimization in F5 XC Global Log Receiver (GLR)
Feature Request: Log Pre-Processing and Optimization in F5 XC Global Log Receiver (GLR) Feature Description We request an enhancement in F5 Distributed Cloud (XC) to introduce log pre-processing and optimization capabilities before logs are forwar...Planned
-
Apply rate limit based on http response code
Hello, It would very helpfull if we can add as a match criteria on rate limit rules the use of http response codes. This will help us applying only rate limit, for example, to the request that gets an specific 4xx or a 5xx code from the origin, le...
