For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jonathancert's avatar
Jonathancert
Icon for Altostratus rankAltostratus
Mar 03, 2020
Solved

TMOS HSTS

Is there a TMOS command to view HSTS settings for a Profile? I can see hsts listed under Property Group but not options. Second option. Is there are curl command to verify.

 

(cfg-sync In Sync)(Active)(/Common)(tmos)# sho /ltm profile http xxx_yyyy_http_prof ?

Options:

 default       Units are determined based on current values

 exa         All values are displayed in exa-units

 field-fmt      Show statistics in field format for the specified items

 gig         All values are displayed in giga-units

 kil         All values are displayed in kilo-units

 meg         All values are displayed in mega-units

 peta         All values are displayed in peta-units

 raw         No conversions are made to any values

 tera         All values are displayed in tera-units

 yotta        All values are displayed in yotta-units

 zetta        All values are displayed in zetta-units

 |          Route command output to a filter

Identifier:

 [object identifier] Name of the profile

Property Groups:

 enforcement     Specifies protocol enforcement settings for the HTTP profile.

 explicit-proxy    Specifies explicit settings for the HTTP profile.

 hsts         Specifies HSTS settings for the HTTP profile.

 sflow        Specifies sFlow settings for the HTTP profile.

 

application delivery
TMOS
TMSH
  • Beaker's avatar
    Beaker
    Mar 04, 2020

    If you use list instead of show you will see the current settings for the profile (list /ltm profile http xxx_yyyy_http_prof)

     

    And when you curl if you use -vv you will see it in the output display that it is defined

     

     

    < HTTP/2.0 302

    < content-type:text/html

    < content-length:161

    < location:https://example.com/

    < strict-transport-security:max-age=31536000; includeSubDomains

    <

     

2 Replies

  • Beaker's avatar
    Beaker
    Icon for Cirrus rankCirrus
    Mar 04, 2020

    If you use list instead of show you will see the current settings for the profile (list /ltm profile http xxx_yyyy_http_prof)

     

    And when you curl if you use -vv you will see it in the output display that it is defined

     

     

    < HTTP/2.0 302

    < content-type:text/html

    < content-length:161

    < location:https://example.com/

    < strict-transport-security:max-age=31536000; includeSubDomains

    <

     

    • Jonathancert's avatar
      Jonathancert
      Icon for Altostratus rankAltostratus
      Mar 04, 2020

      Thanks alot. I would have never found that. Trying to get management to sign off on a Linux class. I'm so lost it TMOS and Bash