-
Client Side Defense - Add ability to filter by IP address on "Script List" dashboard
For troubleshooting purpose, it would be handy to have the ability to filter by IP on "Script List" dashboard. This will enable admin to identify users affted by the malicious script.0
-
HTTP LB - proxy protocol
Description: add the proxy protocol support on HTTP LB in order to discover the real client's real IP. See envoy documentation here Use case: - On Premise deployment using a downstream LB : On Premise, a TCP LB (BIG-IP) can load-balance traffic to...2
-
Improve CE deployment time
Currently CE takes at least 15-30 minutes to come online upon deployment. A significant portion of it involves downloading container images required to run the CE components. Could the container images instead be baked into the CE image (ISO, AMI ...0
-
Integration with Microsoft Teams
Integartion with Microsoft Teams to send the alerts through a pre-defined channel.0
-
Brute Force and Malicious User - skip processing except for the login page
Context After having detecting and mitigating a automation request with Bot Defense, Malicious User (MU) can prevent any further automation request from the same User Identifier. The benefit is that MU doesn't charge mitigated requests but Bot Def... -
API Validation - custom Blocking page
The custom reponse page defined in the App fw policy or in the HTTP LB is not used by API Validation. The response page is a HTML page.My customer expect a JSON response in order to be handled by the client App.Could we have the ability to define ... -
LB HTTP health monitor - no receive string
XC's synthetic monitors include the capability to specify a regex pattern against response body. This is helpful in general for targeted probing, i.e. common application-side built-in health checks that report on critical backend system resources/...0
-
WAF exclusion rule - domain regex
A customer has deployed a HTTP LB for apps in non-prod (myapp-x.np.mydomain.com) and prod environement (myapp-x.np.mydomain.com). When a WAF False Positive occurs on an App in non-prod, they want to create ONE WAF exclusion rule that applies for n... -
Additional fields for security dashboard in `system` namespace
The following information are available in the security dashboard under individual namespace but are missing from the `system` namespace. WAF LB Mode DDOS Detection/Mitigation IP Reputation0
-
CRDs to configure CE in K8s Site directly from Kubernetes API
Using CE in K8s site, could be very useful to have CRDs to configure directly CE from K8s API. Is needed also a controller (like CIS for BIGIP) to watch these CRDs and make API calls to XC Console. This make more easier an integration with CI/CD p...0