-
Support using FQDN/Hostname as the remote endpoint for CE - RE IPsec tunnels.
Today, when configuring an IPsec tunnel between a Customer Edge (CE) and a Regional Edge (RE), the XC Console requires the Remote IP Address field to be a static IPv4/IPv6 address. Hostnames/FQDNs are not accepted. For customers operating in dynam...0
-
Create additional alerts and metrics specifically for customers using Layer-7 (L7) DDoS protection.
These metrics should analyze application health indicators—such as backend response times, error rates, and service availability—to dynamically evaluate how well the application is handling traffic. Using these signals, the system can automaticall...0
-
GSHUT community support for bgp advertised prefixes towards f5xc
Hello, also described in TAC SR 01010154 asking about GSHUT bgp community support which can disable traffic blackholing in some specific situation.Our devices peering with f5xc ddos are setup to be in maintenance mode during boot and convergence a...0
-
Cooling Off Period in Malicious User Detection maximum timeframe
The Malicious user detection in the app setting has an option to configure Cooling Off Period, this is the timeframe in minutes used by system to decays a user's threat level from high to medium to none if there is no further malicious activity. T...2 Planned
-
Need Granular WAF and Request visibility like BigIP
Hi Everyone, I work for an SI. Would like to highlight one of the most core issues with F5 XC. We know that F5 has one of the most accurate, robust and stringent WAF Engines globally when it comes to BigIP. But when it comes to XC, we have noticed...0
-
Security Dashboard - Sankey Diagram
I have a customer that requested a Security Dashboard that displays what the XC control capabilities mitigate, within a Sankey Diagram. (Attached) "This would allow our team to show the actual value XC is providing our organization, within a simpl...0
-
Log failed client TLS handshakes
There are no records of failed TLS handshakes. We cannot see if clients are connecting to an HTTP load balancer with incompatible settings. Either include this in the request logs, or create a separate log view for it.2 Planned
-
Remove the limitation for requests logs export
There is a 500 requests logs export limitation, this limit should be removed as we might missing a lot of logs when we export the logs. Let's say there are 10K logs from 50 IP addresses and the last 500 logs are only from 2 IP addresses, when we e...0
-
Export LB configurations in a CSV format
Export LB configuration data in .csv directly from Distribiuted Cloud for all namespaces.2 Planned
-
LetsEncrypt module to use highest priority domain as CN
Currently, when a certificate is issued, the LetsEncrypt module sets the CN of the certificate seemingly randomly from the domain list and all domains as SAN entries. It would be great if the CN could ALWAYS be the domain configured as priority 1 ...2