For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Virtualrana_132's avatar
Virtualrana_132
Icon for Nimbostratus rankNimbostratus
Nov 07, 2014

HSTS - Header not inserted with iRule

Hi,   Following is my iRule which is attached to $mydomain$ (http) VirtualServer in F5 for HSTS, but it is not inserting the "Strict-Transport-Security" header in the http response. When I run "cu...
Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 07, 2014

Are you attaching the HSTS response iRule to your HTTPS VIP? The HSTS header should only be sent via HTTPS.