-
CE as a forward proxy to detect API calls from their internal server towards external API endpoints (egress)
The SecOps team is unaware of the types of API calls being sent to external API endpoints. These could include calls from a compressing server to outbound C2C servers. The customer is considering implementing a CE as a forward proxy to detect and ...0
-
Custom JS Insertion
Fidelity is requesting custom insert - their own 'custom' or customer JS in the response (Header or Body0
-
Add cookies + headers into 'sensitive data' in our WAAP
Headers and cookies can contain sensitive data such as session cookies, JWT tokens and any other forms of tokens. Those data should be masked in WAAP logs similar to what we can do with parameters (e.g. password).0
-
Add TLS fingerprint as option to block bad actors in the security event actions
Add TLS fingerprint as option to block bad actors in the security event actions. Currently we can only select IP address as options and depending on the case it might be useful to block on TLS fingerprint.0
-
Complete isolation between namespaces.
Following Zendesk ticket 509, customer would like complete isolation between namespaces across pods.0
-
API Rate Limit Discovery value per User Identifier
In the API Discovery dashboard, the Rate Limit button allows to define a Rate Limit value (per second, per minute, per hour) per API endpoint and to configure a User Identifier, for example "per JWT Claim 'email'".But the administrator doesn't kno...0
-
XC WAS - More details on tests played
The dashboard provides with GREEN and RED numbers in OWASP table. Those numbers does not mean anything for the customer. This dashboard must be more dynamic (mouse over, or drill-down information) in order to provide more details on what has been ...
0
-
Hybrid DDOS - Auto-swing DDOS protection from on-prem to cloud DDOS solution
Use traffic metrics to automatically swing DDOS protection from on-premise to cloud DDOS solution0