Feature Area: Web App & API Protection → HTTP Load Balancer → WAF Exclusion Rules

Request Type: GUI Enhancement / Usability Improvement

Description

When viewing the WAF Exclusion Rules configured under an HTTP Load Balancer in the F5 Distributed Cloud Console, the Domain column displays the word Exact instead of the actual domain name/FQDN configured in the respective WAF exclusion rule.

The displayed value does not provide the user with the configured domain information and makes it difficult to identify which domain each exclusion rule applies to when reviewing multiple rules.

Current Behaviour

The Domain column displays Exact for the WAF exclusion rules, rather than showing the actual configured domain name or FQDN.

Expected Behaviour

The Domain column should display the actual domain name/FQDN configured within each WAF exclusion rule.

If Exact represents the domain matching mode, it should be displayed separately from the configured domain value, or the table should otherwise clearly present both the matching mode and the associated domain.

Business Justification

• Improves visibility of WAF exclusion configurations.

• Makes it easier to identify and validate exclusions associated with specific application domains.

• Reduces the need to open individual rules to verify their configured FQDNs.

• Improves operational efficiency when managing HTTP Load Balancers with multiple WAF exclusion rules.

Supporting Evidence

A screenshot of the F5 XC Console is attached. It shows the WAF Exclusion Rules table under the HTTP Load Balancer application-lb-5, where the Domain column displays Exact instead of the configured domain name.

Requested Outcome

Please review this behaviour and consider updating the GUI to display the configured domain/FQDN in the Domain column, with the domain matching mode represented separately where applicable.

pRPcgWXME4.png

Attachments Open full size