-
Add Government Region option to AWS and Azure Cloud Sites
Some System Integrators and Contractors need to build within Gov Regions for integration and testing but do not require full FedRAMP. Having this integration / option across the board for the commercial platform will also align with requirements o...
0
-
req_id as a searchable field from the security events page
When dealing with false positive WAF events it would be nice if req_id was a searchable field from the securiy events page.
0
-
Clarity on usage
Currently, if you want to understand your usages across different namespaces you need to run API queries to fully understand what apps are using what and how that is compared against your quota. This is not a very business savvy process because it...0
-
Make "Policy Rules Hit" seen by site instead of globally
Hello team, this Idea come from several tickets that I see people asking to have this kind of sort policies by site hit instead of globally as in the pic that I attached. original ticket #2016.
0
-
Allow Letsencrypt challenge through the load-balancer to the origin
When an origin server behind F5DC uses a certificate provided by Letsencrypt, renewals of this certificate will fail, as the load-balancer intercepts ALL requests to http://<domain>/.well-known/acme-challenge/* and returns a 404 for a challe...0
-
Add TLS fingerprint as option to block bad actors in the security event actions
Add TLS fingerprint as option to block bad actors in the security event actions. Currently we can only select IP address as options and depending on the case it might be useful to block on TLS fingerprint.0
-
Ability to have TLS fingerprint for User Identification
Because some flood requests come from different IPs, different ASNs and different countries, we need to discriminate the requests more finely with the TLS fingerprint for example.0
-
Alert for origin servers that allow connections from the internet and are not locked down to the F5 Distributed Cloud IPs
One of the common mistakes customers behind a WAF solution in the cloud is to forget or to misconfigure their firewalls in a way an attacker can bypass the WAF solution by connecting directly to the origin servers. F5 Distributed Cloud could have ...0
-
Export logs to PDF or forward logs to SIEM
For compliance and security monitoring purposes0
-
Rewrite the hostname part of the 302 Location header response
When the "Host rewrite" feature is enabled on the HTTP Loadbalancer and the backend server responds with 302 redirects with absolute path Location header (which includes the hostname the was rewritten by the HTTP LB), we need a way to rewrite the ...
0