-
CE Admin password - enforce strict password policy
Issue: When a cloud site (AWS/Azure/GCP) is deployed, there is a new feature implemented where the admin password can be set. This password does not enforce any policy. I can use a simple password like asd123. Admin password should enforce a stric...0
-
Bot Defense: Allow or Log Payload which exeeds 1MB Limit
Problem: Currently if payload in a POST requests exceeds the limit of 1MB on a PATH which is included in the Bot Defense Profile, then a 413 Error is responded from the F5 XC Plattform. Which means the Bot Defense Feature can't be used for th...0
-
JWT claim based policy
The recent XC WAAP release supports the JWT discovery and extracts the claims from the token. It could be powerful to stop access control-related attacks if we can set the policy based on JWT claims in XC WAAP. For example, if the user's group inf...
0
-
Restrict user from seeing other Namespaces which is meaningless to them
Provide option or default user experience that users has their own namespaces and not seeing others. This is unecessary if they don't interact to each other. Potentially can improve security also. Furthermore MSP can just use 1 tenant to house all...0 Already exists