-
Matching criteria with Negation/Not on policies
For example country match in rate limit policy, only allows selection of countries with a limit. thus multiple policies will be required if customer would like to exclude all countries except for a few countries. for less complication, matcher fie...0
-
HTTP vs TCP+SNI pre-flight check
XC should have a check in place to only allow one object with the same domain and advertisement policy. Currently, there's no check in place and systems allows you to create HTTPS LB and TCP+SNI LB with the same domain and advertisement policy whi...0
-
Show Route Advertise status on Dashboard
We cannot see the Route Advertise status of Routed DDoS on Dashboard. (I can only see the name and prefix right now) I would like this status added to the dashboard.0
-
If XC cannot enforce TLS Security Level, provide warning message
We recently ran into this issue: https://f5cloud.zendesk.com/hc/en-us/articles/24793738208151-Why-is-TLSv1-0-1-1-enabled-for-F5-XC-HTTP-LB-even-though-TLS-setting-is-High When the same certificate is used for multiple Load Balancers on the same VI...0
-
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...0
-
Configuration Diff to review and confirm changes
The configuration Diff feature/tool can help reduce human error when updating tenant's configuration. This feature should display both previous and updated version and highlight the components/features on xC that have been changed prior to "SAVE/S...0
-
Separate Management Interface for CE so it can operate with option of not building a tunnel to RE's
Have a deployment option of CE clusters where there is a separate management interface that can communicate with XC portal/management/configuration/reporting but CE building IPSEC/SSL tunnels to RE should be optional. This will enable CE's to be r...0
-
Customize the block page of service policy
The feature is missing because when a client will be block by the Service Policy he will know that the service's traffic is through F5 and which PoP is answering right now for the request. It's unsecure for some customers.0
-
F5 is not sending base64 files to external server using ICAP
F5 currently is not scanning files against viruses so in this case external server need to be placed to scan files uploaded by clients. F5 using ICAP protocol forward files to the server but here protocol has a limitation; it is not supporting BAS...0
-
Increase the limit of 500 requests/records shown in "Security > Security Analytics" and "Security > Requests"
Increase the limit of 500 requests/records shown in "Security > Security Analytics" and "Security > Requests". This is not feasible if the event logs are more than 500 records. Suggest to increase the number to at least 1,000 or 2,000 record...1