-
On HTTP Load Balancers allow certificate files up to 20 kB.
When importing a TLS certificate, the upload file function restricts the file size for PEM or PKCS12-encoded certificate to 10 kB. A custom certificate we are trying to use on F5 Distributed Cloud load balancers are 14 kB with the full cert chain ...1
-
Bot Defense: Allow or Log Payload which exeeds 1MB Limit
Problem: Currently if payload in a POST requests exceeds the limit of 1MB on a PATH which is included in the Bot Defense Profile, then a 413 Error is responded from the F5 XC Plattform. Which means the Bot Defense Feature can't be used for th...0
-
JWT claim based policy
The recent XC WAAP release supports the JWT discovery and extracts the claims from the token. It could be powerful to stop access control-related attacks if we can set the policy based on JWT claims in XC WAAP. For example, if the user's group inf...
0
-
Restrict user from seeing other Namespaces which is meaningless to them
Provide option or default user experience that users has their own namespaces and not seeing others. This is unecessary if they don't interact to each other. Potentially can improve security also. Furthermore MSP can just use 1 tenant to house all...0 Already exists
-
Add Rate Limiting & IP Rep to list of controls that can be "skipped" via Policy in Common Security Controls
To disable security controls for a PCI scanner I have to make at least 2 config changes on the LB. Since IP rep can only be done via Trusted clients and Trusted Clients only allows a single IP/range per config, we must create a config for each IP ...0