-
URL/URI Exemption for DDOS for false positive traffic
Would like to request if URL/URI exemption can be excluded in DDOS scanning? So that specific URL/URI path will not be terminated by DDOS protection but still other URL/URI path of the website can be protected. Currently we have client wherein... -
associate a free form description to each IP in an IP Prefix Set
To allow the tenant to associate change ticket details to each IP added such as the date, the person making the change and the internal ticket number for reference. Similar to how data groups work in legacy BIP IP where you have a key/value pair. ... -
Disable weak ciphers in Customer Edges
Hi, Our security team is reporting the CEs allow connections on weak ciphers. Negotiated with the following insecure cipher suites: * TLS 1.2 ciphers: * TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA * TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA -
Install Private CA cert on Customer Edges
Hi, Our security team would like us to install certs from our Private CA on the Customer Edges. The cert provided by the CEs are expired and untrusted. -
custom role to allow enabling/disabling pool members
Allow non admin users to enable or disable origin pool members. For instance to allow the application team to disable a node when performing maintenance. This would be similar to the operator role in BIG IP. -
Increase the SAN limits to match Lets Encrypt
The auto cert feature only allows 32 SAN entries. XC should support what Lets Encrypt supports i.e. 100 SAN entries should be allowed. -
Show discovered shadow endpoints as searchable security events or some persistent searchable log
The ability to clearly understand when a shadow endpoint in an API emerges is incredibly valuable to security teams that need to understand when their attack surface changes. The API Discovery tab stops showing this information after some time and... -
Add more than 16 service policies to a single load balancer
Hello, It would be grat to be able to add more than 16 Service Policies to a single Load Blancer. Thanks! -
configure allowed egress domains in Client Side Defense (CSD) allowed list
why - Today CSD (Client Side Defense) mitigates on a per JavaScript/domain combo which means each time a new script or a new domain shows up we have to act to mitigate. It would be more efficient to define an allowed list of domains, domains JS is... -
service tags
Hello, i would like to have an F5 mainted list of service tags , for example from microsoft https://www.microsoft.com/en-us/download/details.aspx?id=56519 that i can integrate directly in the ip prefix list
