For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Jul 27, 2018

JSON Web Signature (JWS) verification

Hi. Can LTM/ASM verify JSON Web Signatures (included as X-JWS-SIGNATURE in http header) against the payload?  
ASM Advanced WAF
LTM
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Aug 02, 2018

X-JWS-SIGNATURE is not supported in ASM at the moment, it can be achieved by developing an iRule though if you have such a requirement.

 

Don't forget that ASM automatically adds a layer of digitally signed cookies kind of addressing the same problem for any traffic:

 

https://support.f5.com/csp/article/K6850

 

Hope this helps,

 

Sam