Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Ashu_Aggarwal's avatar
Ashu_Aggarwal
Icon for Cirrus rankCirrus
Oct 28, 2020

Token based ACL in header

Is it possible to configure below on LTMs? Implement token based ACL in header (which web server/LB checks before allowing access to websites). This token needs to be valid for a very short time an...
application delivery
big-ip
LTM
boneyard's avatar
boneyard
Icon for MVP rankMVP
Oct 29, 2020

sure, shouldn't be that hard. BIG-IP can check the header for sure. it can check if the token is allowed in table and once it is used start a timer.

 

main thing is how to determine which tokens are valid and how the users get them. if you want to automate that things become more tricky, but it probably can be build.