-
Threat Mesh tuneability
Threat Mesh needs the ability to be customized rather than a simple on/off. We are constantly facing false positives. It would greatly improve the experience if we could configure thresholds, such as only blocking Low, Medium, or High risk deemed ... -
Geoloc filtering at L3 firewall/router
Feature Description Ability for F5XC admin so set L3 rules based on Geoloc. Current Geoloc rules are only at Service Policy level. Problem Statement L3 rules are more efficient than Service Policy rules Business Impact Customer does not have acces...
-
API Sec - Local Edition for Nginx
Today, LAD (Local API Discovery) support BIG-IP only. Non-BIG-IP customers who uses NGINX, want to have the same air-gaped API discovery for NGINX
-
Custom response code for Service Policy
Feature Description Ability to choose the response code sent back Service Policy when request is blocked - by default 403 Problem Statement Customers don't want 403 error code as default SP blocking response code
-
Automated certificate issuance per Domain/Route on HTTP Load Balancer without sharing SANs across other sites on the same Load Balancer
Currently all domains on a single Load Balancer share a single certificate with SANs. This is a security concern both for enumeration and shared scope. It should be possible to specify individual automated certificates that aren't just using SANs. -
Threat Mesh Enable - Staging Option
Currently the only option for threat mesh is enable/disable. Since Threat Mesh DB is updated to block using an IP there is a possibility of false positives and the chances of blocking an entire organization based on one bad actor that is coming fr... -
Enable support for initial NIST PQC (Post-quantum) algorithms across the XC platform for TLS.
Competitive providers are already implementing PQC algorithms as part of their platforms. Enterprises and governments are already planning for transition and in some cases, have already implemented elements of PQC algorithms, even ahead of standar...Planned
-
Rate Limiting at L3 firewall/router
Feature Description Ability for F5XC admin so set Rate Limiting L3 rules at Firewall/Router level Current RL rules are only at Service Policy level. Problem Statement L3 rules are more efficient than Service Policy rules Business Impact Customer d...
-
Disable the Attack Signatures Staging for “High Risk and High Accuracy”
• Feature DescriptionDisable the Attack Signatures Staging (App Firewall object) feature for attack signature with “High Risk and High Accuracy”.• Problem StatementImportant signatures could be in staging the first days of a major breach.• Busines...
-
F5 XC Synthetic Monitoring IPs should not be flagged as 'suspicious bot' by WAF
Currently, F5 XC Service Synthetic Monitoring traffic is flagged as a suspicious bot by XC WAF. This will result in failure if suspicious bot controls are in deny mode. Can we ensure we don't flag traffic from one of the known F5 XC services as a ...
