For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

beefy80's avatar
beefy80
Icon for Nimbostratus rankNimbostratus
May 31, 2016

Protecting a site coded with angular js with ASM

Hello, I have been advised by our Dev team that they are looking at re-writing our Customer Portal and using Angular JS. We use ASM heavily in our environment and was wondering if anyone has deploye...
ASM Advanced WAF
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 31, 2016

Hi,

 

This is currently "unsupported". Features that require js code insertion will fail.

 

In 12.1.0, f5 added support for websocket in ASM.

 

And you can use traditional features includibg json profiles.

 

We have several angular js apps deployed behind asm and thus have basic security policies

 

  • beefy80's avatar
    beefy80
    Icon for Nimbostratus rankNimbostratus
    May 31, 2016
    Yann Thank you for your quick reply. I had a feeling that this would only be protected in a basic way due to the limited information I could find. I work in an environment that complies with PCI-DSS so need to ensure that the ASM can adequately protect the site. I had noticed that Web Sockets were available in 12.1.0 but were not sure how that would fit with AngularJS James
  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 31, 2016
    Hi, you can regularly find real time features for dashboard, notifications in the browser. Those features you can find in a single page (typically angularJS) web dashboard for example are most of the time due to websocket usage.