Forum Discussion

edmonaft_351139's avatar
edmonaft_351139
Icon for Nimbostratus rankNimbostratus
Mar 12, 2018

Implementing HSTS on F5 LTM 12.1.2 HF2 without using iRules

Hi there,

 

May i ask if is there a way that I could toggle enforcing HSTS under this firmware without resorting to using iRules? If so, may i know how it's done?

 

Thank you!

 

BIG-IP
LTM
security
  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Mar 12, 2018

    I read somewhere in article that beginning in v12, its available in the HTTP profile setting itself. You need not go with the Irule, but rather get this done through the HTTP profile itself.

    Edit: Please follow the below article.

    https://support.f5.com/csp/article/K40243113

    HTTP Strict Transport Security

    Note: The HTTP Strict Transport Security (HSTS) settings are only available in BIG-IP 12.0.0 and later. The Preload option is only available starting in BIG-IP 13.0.0 or later.

    The below article may also give you more info,

    Enforce full encryption by enabling HSTS in an HTTP profile