For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Oct 19, 2016

I doubt that PCI-DSS will give you any trouble for the fact that you can prove that you have a WAF :) on more serious note though what the auditors would look for is patching level. There have been several security vulnerabilities in F5 products in the past few months, so make sure you have the latest Hotfixes.

 

Here is a handy link listing all F5 vulnerabilities (CVEs) in 2016:

 

F5 CVE Details