Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

nbenos_217832's avatar
nbenos_217832
Icon for Nimbostratus rankNimbostratus
Sep 24, 2018

CORS Enforcement on ASM

Hello, has anyone had success enforcing CORS through ASM. I have enabled and and allowed a wildcard for origins (for testing only), but I'm still unsuccessful seeing the headers replaced when I run a...
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Sep 24, 2018

For Enforcement Mode, are you using "Enforce on ASM", "Remove all CORS Headers", or "Replace CORS Headers"? The idea is that ASM will compare the Origin header to the list of host names in your policy and the allowed origins for the respective URL (or wildcard in your case.)