For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Jan 04, 2016

HSTS and APM (ssllabs)

hi   trying to achieve a grade a+ with ssllabs for my VS that have an Access Policy bound.   I'm running v12 and use the HSTS setting in the HTTP profile.   Testing my website with SSLLabs, ...
BIG-IP Access Policy Manager (APM)
hsts
security
amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Feb 01, 2016

After upgrading to 12.0 HF-1 and using the above iRule, we had no issue with /my.policy (with and without On-demand cert auth).

 

Got from F5 support the existing BUGID 565554, which is about

 

  • not needing the workaround irule anymore (ID is mentioned in the irule above)

++ additionally:

 

  • missing HSTS header randomly seen (when serving APM objects)

Alex