Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

rache1_266651's avatar
rache1_266651
Icon for Nimbostratus rankNimbostratus
Sep 29, 2017

SSL validation with client (browser) in case of URL redirection

we have a task to redirect a URL say abc.com to on the GTM.   Currently we have a cname to point to , since we are using sd.com zone for doing global load balancing. The is pointing to reverse...
BIG-IP DNS
LTM
security
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Sep 30, 2017

Hi,

 

Certificate validation doesn’t follow dns cname.

 

If your browser requests abc.com, certificate must include abc.com in SAN (or Subject but if SAN exists, subject is ignored, and chrome decided to make subject validation deprecated)