Forum Discussion

Godswill_Aliagh's avatar
Godswill_Aliagh
Icon for Nimbostratus rankNimbostratus
Dec 19, 2018

How do I implement or configure Base Domain HSTS Preload on BigIP version 11

I recently transitioned proxy servers websites to F5 and now I am asked to implement or configure Base Domain HSTS Preload on all the their Virtual servers on the F5 so that the websites will meet security compliance.

 

I am trying to find out what I can enable or implement on the virtual servers for the website to meet the security requirement

 

BIG-IP
LTM
security
  • wlopez's avatar
    wlopez
    Icon for Cirrocumulus rankCirrocumulus
    Dec 19, 2018

    You can add an iRule like this one on any virtual server where you're doing client ssl and have an http profile:

    when HTTP_RESPONSE {
    HTTP::header insert Strict-Transport-Security "max-age=15552000; includeSubDomains"
}