For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chery's avatar
Chery
Icon for Nimbostratus rankNimbostratus
Nov 17, 2021

F5 is Overriding Authorization Header

We are using BIG-IP 15.1.3.1 . We have an application that uses a JWT auth scheme. However the f5 keeps overriding the Authorization Header containing the Bearer. Is there an I rule that we could write to prevent that from happening. Thank you

BIG-IP
iRules
security

1 Reply

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Nov 27, 2021

    you can probably write such an iRule.

     

    but i would start with why does the BIG-IP override that header?

     

    is this a normal virtual server or are you using APM or such?