Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Jul 27, 2018

JSON Web Signature (JWS) verification

Hi. Can LTM/ASM verify JSON Web Signatures (included as X-JWS-SIGNATURE in http header) against the payload?  
ASM Advanced WAF
LTM
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Aug 02, 2018

X-JWS-SIGNATURE is not supported in ASM at the moment, it can be achieved by developing an iRule though if you have such a requirement.

 

Don't forget that ASM automatically adds a layer of digitally signed cookies kind of addressing the same problem for any traffic:

 

https://support.f5.com/csp/article/K6850

 

Hope this helps,

 

Sam