Community Highlights, Week 15 '23
Tip of the week:
Twofer this week!
1) If you're an F5 partner, be sure to check out our first-ever Partner Connect event Tuesday and Wednesday this week!
2) If you're headed to RSA next week in San Francisco, be sure to check out AubreyKingF5's DevCentral RSA Trip Planning Guide
Some content you may have missed:
Articles
- Microsoft's Strike on Cybercriminals and SFX backdoor- April 1st-April 7th - This Week in Security from Dharminder
- HTTP Request Smuggling, what it is, how to find it and how to stop it by AaronJB
- How to quickly protect your Cloudflare CDN with F5 Distributed Cloud Bot Defense by Ted_Byerly
- How I did it - "Remote Logging with the F5 XC Global Log Receiver and Sumo Logic" by Greg_Coward
Videos
- How To Create Namespaces In The F5 Distributed Cloud Managed Kubernetes
- How to Quickly Protect Your Cloudflare CDN with F5 Distributed Cloud Bot Defense
- This Month In Security Episode 09: March, 2023 w/ Ben Edwards
Forum post highlights:
fredlubrano shared a custom response specific to aWaf adapted for the API and status code (406), ex for Maximum Length
Kevin_Davies shared how to Get Started with F5 NGINX Plus, Ingress, App Protect and Management Suite
Notable solutions:
- Margvin asked a timely question about how to get up to speed on LTM and GTM, and Paulius posted the link to paid and freetraining available through F5 Services
- pinkzeppelin asked how to add date and time to ASM response pages, and Daniel_Wolf had the iRule for the job
- Ireda was having difficulty migrating from Citrix to F5, and Paulius had some help
I've got to call out Paulius and Enes_Afsin_Al for both being really active and helpful over this past week - thanks so much for all the assists, gentlemen!
Unanswered questions:
- My teammate buulam would like to know How's your API security strategy since last year?
- etherchannel01 is having an issue with a SAML error
- David_Wallis wants to know how to create a log entry in /var/log/ltm via iControl
- Sarah is dealing with a C3D issue where theapp server is unable to authenticate the client and getting "invalid thumbprint" in server logs.
- jayantand is having a problem with TSPD cookie injecting an extra field which crashes the app
Gave the most kudos:
Top kudoed posts:
- custom response specific to aWaf adapted for the API and status code (406), ex for Maximum Length by fredlubrano
- CA_Valli's response to What is this certificate for?
- Get Started with F5 NGINX Plus, Ingress, App Protect and Management Suite by Kevin_Davies
F5er stats:
Most kudoed:
Gave the most kudos:
Top kudoed posts:
- Microsoft's Strike on Cybercriminals and SFX backdoor- April 1st-April 7th - This Week in Security by Dharminder
- How to quickly protect your Cloudflare CDN with F5 Distributed Cloud Bot Defense by Ted_Byerly
- HomeRouter, JokeRFC, Copilot, AttackToAI - March 25th - 31th, 2023 - F5 SIRT - This Week in Security by Koichi
Published Apr 18, 2023
Version 1.0