Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Shazee's avatar
Shazee
Icon for Altocumulus rankAltocumulus
Nov 13, 2019

WAF and LTM policy - apply to same Visrtual server

Hello All,   can we have LTM local policy ( Local Traffic ››  Policies : Policy List ) and WAF policy (Security  ››  Application Security : Security Policies : Policies List) be applied to a sam...
ASM Advanced WAF
big-ip
LTM
security
Shazee's avatar
Shazee
Icon for Altocumulus rankAltocumulus
Nov 20, 2019

Thank you for your response.

Could you please elaborate.

I have a local policy to

Remove HTTP Header named 'server' at response time

and

Remove HTTP Header named 'X-Application-Context' at response time. in the local policies.( Basically Header removals)

 

But when i apply a basic WAF policy to protect against the OWASP Top 10 through WAF/ASM , Local policy takes precedence and removes . the WAF policies.

Could you please elaborate the reply with this as scenario?

Using Big IP VE 14.1.2 in AWS