For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dromerot's avatar
dromerot
Icon for Nimbostratus rankNimbostratus
Apr 07, 2021

Disable Host Name Check

Hi,   I would like to disable the Host Name check in the security policy. I mean, I would like to allow all Host Name. I've configured a Rapid Deployment Policy (RDP) and I've tried to configure ...
ASM Advanced WAF
BIG-IP
security
dromerot's avatar
dromerot
Icon for Nimbostratus rankNimbostratus
Apr 07, 2021

Hi Nikoolayy1,

 

I would like to disable Host Name checks, as a result, I was thinking to add a wildcard as Host Name, but it's not possible. I would like to allow ANY Host Name. There are not a list of Host Name allowed because all Host Name should be allowed.

 

When I send requests to a hostname which is not on the allowed list, there is a violation. I think this is the normal behavior. Right?

 

Thank you very much!

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Apr 07, 2021

As Radek metioned I have not seen issues with being blocked by this thing, so this is why F5 has not provided a wildcard option. Better test if you are getting at all and if you see error related to the host header as I provided it before first follow K15473 and if there is something else mention it.

 

https://support.f5.com/csp/article/K15473