Forum Discussion
Alan_Johnson_30
Nimbostratus
NimbostratusHTTP Security Headers - LTM Policies
Hi folks,
I'm trying to create some LTM Policies for the following:
•X-XSS-Protection
•X-Content-Type-Options
•Content-Security-Policy
•Strict-Transport-Security
I already have the following wo...
WAF_EngineeringNimbostratus
NimbostratusWe wish to do this as well. In our example we wish to allow from multiple domains such as:
A.com
B.com
C.com
Are these comma separate values? Semi-colon separated values? spaces inbetween or not? After implementing the change (no errors in web-ui), and generating test traffic, the x-frame-options header was NOT present in the response and we're not sure why.