-
Implementing a 2FA system
In alignment with the recent F5 Security Promise, I want to highlight a gap in our process/system to authenticate customers calling the support line. Currently, the implemented process, requires customers to provide their tenant name, after which ...0
-
Automated certificate issuance per Domain/Route on HTTP Load Balancer without sharing SANs across other sites on the same Load Balancer
Currently all domains on a single Load Balancer share a single certificate with SANs. This is a security concern both for enumeration and shared scope. It should be possible to specify individual automated certificates that aren't just using SANs.0
-
Email notifications for team owners could be turned off or reworded
As a team owner on the http://testing.demo1.volterra.us/ team, whenever a new child tenant gets created, or destroyed, I get an email telling me that happened. The email has these two blurbs in it: This notification is being sent to you because ...0 Planned
-
CRL - Console Location
I noticed CRL was not present within the Web App & API Protection tile. It is present within Multi-Cloud App Connect, under "Load Balancers?" but not within either persona tile within Certificate Management, where I would expect it.0 Planned
-
Log Pre-Processing and Optimization in F5 XC Global Log Receiver (GLR)
Feature Request: Log Pre-Processing and Optimization in F5 XC Global Log Receiver (GLR) Feature Description We request an enhancement in F5 Distributed Cloud (XC) to introduce log pre-processing and optimization capabilities before logs are forwar...0 Planned
-
Add new filter for AWS Trace ID and Policy Number for banking transactional API
During one of our recent request analyses, we encountered latency issues affecting our onboarded applications. These applications rely on APIs that invoke backend services based on parameters such as policy number, claims, and trace ID from the AS...0
-
Apply rate limit based on http response code
Hello, It would very helpfull if we can add as a match criteria on rate limit rules the use of http response codes. This will help us applying only rate limit, for example, to the request that gets an specific 4xx or a 5xx code from the origin, le...0
-
Request for an Alert Triggered Exclusively by Pure WAF Signature Detections
We would like to request the implementation of an alert that is triggered by pure WAF detections only. F5XC currently provides an alert called “WAFTooManyAttacks”. However, according to feedback from support, the count used for this alert includes...0
-
Enhancement : Unified Multi-Value Matcher & Logic UI
This request proposes a fundamental shift in how F5 Distributed Cloud (XC) handles configuration inputs. Instead of choosing between a single literal value or a complex Regular Expression, the UI should provide a Unified Matcher capable of handlin... -
support a native negative key list or invert matcher for Sensitive Data Discovery
why - Currently Sensitive Data Discovery does not support an “invert matcher” or negative key list capability for Key-Value Pattern rules. The available options are limited to exact match, substring, or regex for expected keys, and there is no bui...0