For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dor's avatar
Dor
Icon for Nimbostratus rankNimbostratus
Nov 18, 2020

hey,

 

CORES is a browser security feature, it allows the app to send headers that instruct some security aspects that the browser should take on the presented web page

it seams that it is not supported on the APM module. to overcome this we have publish the web application using ASM, and enabled SAML authentication on the APP with another VS on the F5 with APM as IDP

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Nov 18, 2020

    CORS... got you.

    So, it looks like you have a problem with APM only. Right?... and it looks like you resolved it by involving another VS. Am I right or you still have some problem?

     

    Thanks, Ivan

    • Dor's avatar
      Dor
      Icon for Nimbostratus rankNimbostratus
      Nov 18, 2020

      yes you are right....

       

      well now i have a request from the customer to allow access also to the DEV environment....

      the problem both PROD and DEV uses the same FQDNs, and they are on different server..

      i thought maybe by changing the selected POOL by some parameter i can have both of the environment published.