Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Felix_M__379008's avatar
Felix_M__379008
Icon for Nimbostratus rankNimbostratus
Dec 11, 2018

Preflight request with BIG-IP ASM

I have a Web service endpoint that is behind a BigIP server that requires authentication. Before using the Web service, the client (a browser) user must log in and use the cookies returned by the Big...
ASM Advanced WAF
big-ip
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2019

This is probably because you don't allow OPTIONS method in your ASM policy. If ASM blocking OPTIONS request breaks the rest of your application flow then OPTIONS must be allowed.