f5 Traffic Manipulation

 

Wanted to confirm understanding on traffic manipulation -

 

 

Query 1:- As a principal does f5 insert javascript code/cookie is done in the request going to the webserver or the response coming from the webserver and going to the client browser.

 

 

The context in question is specifically for the below 3 policy setting :-

 

 

1) CSRF protection (inserts js)

 

2) Webscrapping (inserts js)

 

3) ASM cookie (inserts cookie by default even if the none of the cookie settings are enabled)

 

 

 

I believe besides these 3 , there are no other settings that make f5 manipulate the traffic. Hence The other query is:-

 

 

Query 2 ) Besides these 3 , are there any other settings that make f5 manipulate the traffic for protection ?

 

 

Nik