-
Ability to move Tenant Access configuration to only be configurable by Tenant Owner
Removing the ability for "standard" users to be able to change the Tenant Access configuration can help with various compliance requirements (such as PCI) if the customer has no need for the feature -
Ability to move Service Credentials configuration to only be configurable by Tenant Owner
Removing the ability for "standard" users to be able to change the Service Credentials configuration can help with various compliance requirements (such as PCI) if the customer has no need for the feature -
Ability to move Tenant Access configuration to only be configurable by Tenant Owner
Removing the ability for "standard" users to be able to change the Tenant Access configuration can help with various compliance requirements (such as PCI) if the customer has no need for the feature -
Allow for service polices to be applied at the route level
Services policies are at the LB level, it would be nice to have an option to apply different service polices based on route (like you can with App Firewall) -
Provide a graphical simulator for service policies that will show you the process logic
while creating service policies to make sure is what you are creating is what you are expecting. -
More Granular User Roles
Ability to give access to the Company's SOC to manage a Global IP Blacklist & Allow List. Currently, Shared IP Prefix Sets are configure to be used by Fast ACL. However the user access roles are not granular enough to allocate update permissio... -
Protection in place to prevent the delete of a certificate that is currently in use
A customer had a situation in which they needed to replace a cert on a particular VIP and they were able to delete the in-use certificate. Should there not be a protection in place to prevent the delete of a certificate that is currently in use? T... -
URL/URI Exemption for DDOS for false positive traffic
Would like to request if URL/URI exemption can be excluded in DDOS scanning? So that specific URL/URI path will not be terminated by DDOS protection but still other URL/URI path of the website can be protected. Currently we have client wherein... -
Disable weak ciphers in Customer Edges
Hi, Our security team is reporting the CEs allow connections on weak ciphers. Negotiated with the following insecure cipher suites: * TLS 1.2 ciphers: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA -
Install Private CA cert on Customer Edges
Hi, Our security team would like us to install certs from our Private CA on the Customer Edges. The cert provided by the CEs are expired and untrusted.
