Forum Discussion

saidshow's avatar
saidshow
Icon for Cirrus rankCirrus
Oct 31, 2019

HSTS / ASM connection drops

Hi All,   We currently implement HSTS as an iRule on the F5, we also decrypt and inspect traffic with ASM. There are discussions internally on our side about adding HSTS to the web server respons...
ASM Advanced WAF
decrypt
devops
hsts
iis
iRules
security
server
Samir's avatar
Samir
Icon for MVP rankMVP

No. I have not faced this issue. However will suggest you to validate the HSTS setting in Test environment or non business hour (Prod Application) to 100% sure.

saidshow's avatar
saidshow
Icon for Cirrus rankCirrus
Oct 31, 2019

Thanks . In our TEST environment I have HSTS setup on the F5. If the business does decide to do the HSTS in the app then we will certainly start in the TEST environment and monitor.

To confirm, you are using ASM, ASM is working as expected and HSTS is enabled in code rather than on the F5?