For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

beefy80's avatar
beefy80
Icon for Nimbostratus rankNimbostratus
May 31, 2016

Protecting a site coded with angular js with ASM

Hello, I have been advised by our Dev team that they are looking at re-writing our Customer Portal and using Angular JS. We use ASM heavily in our environment and was wondering if anyone has deployed a site using Angular JS behind an ASM. I have been looking around on the Net but cannot find much about protecting this type of site with any WAF let alone ASM. Any thoughts / Advise would be appreciated. At this time there is no site at all for me to work with and our Dev team are looking to me to advise if ASM is going to protect the site as we want.

 

Thanks

 

James

 

ASM Advanced WAF
security

8 Replies

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 31, 2016

    Hi,

     

    This is currently "unsupported". Features that require js code insertion will fail.

     

    In 12.1.0, f5 added support for websocket in ASM.

     

    And you can use traditional features includibg json profiles.

     

    We have several angular js apps deployed behind asm and thus have basic security policies

     

    • beefy80's avatar
      beefy80
      Icon for Nimbostratus rankNimbostratus
      May 31, 2016
      Yann Thank you for your quick reply. I had a feeling that this would only be protected in a basic way due to the limited information I could find. I work in an environment that complies with PCI-DSS so need to ensure that the ASM can adequately protect the site. I had noticed that Web Sockets were available in 12.1.0 but were not sure how that would fit with AngularJS James
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      May 31, 2016
      Hi, you can regularly find real time features for dashboard, notifications in the browser. Those features you can find in a single page (typically angularJS) web dashboard for example are most of the time due to websocket usage.
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    Icon for Nacreous rankNacreous
    May 31, 2016

    Hi,

     

    This is currently "unsupported". Features that require js code insertion will fail.

     

    In 12.1.0, f5 added support for websocket in ASM.

     

    And you can use traditional features includibg json profiles.

     

    We have several angular js apps deployed behind asm and thus have basic security policies

     

    • beefy80's avatar
      beefy80
      Icon for Nimbostratus rankNimbostratus
      May 31, 2016
      Yann Thank you for your quick reply. I had a feeling that this would only be protected in a basic way due to the limited information I could find. I work in an environment that complies with PCI-DSS so need to ensure that the ASM can adequately protect the site. I had noticed that Web Sockets were available in 12.1.0 but were not sure how that would fit with AngularJS James
    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      May 31, 2016
      Hi, you can regularly find real time features for dashboard, notifications in the browser. Those features you can find in a single page (typically angularJS) web dashboard for example are most of the time due to websocket usage.
  • 2funky_105078's avatar
    2funky_105078
    Icon for Cirrus rankCirrus
    May 20, 2017

    So is Angular js supported or not with F5 ASM?

     

    I read that websocket are supported but what about the SPA app (single page application) of Angular?

     

    Does any SPA app uses Ajax to interact?

     

    What are the limitations of ASM with Angular JS?