For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Shazee's avatar
Shazee
Icon for Altocumulus rankAltocumulus
Nov 13, 2019

WAF and LTM policy - apply to same Visrtual server

Hello All,   can we have LTM local policy ( Local Traffic ››  Policies : Policy List ) and WAF policy (Security  ››  Application Security : Security Policies : Policies List) be applied to a sam...
ASM Advanced WAF
BIG-IP
LTM
security
Shazee's avatar
Shazee
Icon for Altocumulus rankAltocumulus
Nov 20, 2019

Thank you for your response.

Could you please elaborate.

I have a local policy to

Remove HTTP Header named 'server' at response time

and

Remove HTTP Header named 'X-Application-Context' at response time. in the local policies.( Basically Header removals)

 

But when i apply a basic WAF policy to protect against the OWASP Top 10 through WAF/ASM , Local policy takes precedence and removes . the WAF policies.

Could you please elaborate the reply with this as scenario?

Using Big IP VE 14.1.2 in AWS