Community Highlights, Week 15 '23

[Leslie_Hubertus]

Tip of the week:

Twofer this week!

1) If you're an F5 partner, be sure to check out our first-ever Partner Connect event Tuesday and Wednesday this week!

2) If you're headed to RSA next week in San Francisco, be sure to check out @AubreyKingF5's DevCentral RSA Trip Planning Guide

Some content you may have missed:

Articles

• Microsoft's Strike on Cybercriminals and SFX backdoor- April 1st-April 7th - This Week in Security from @Dharminder 
• HTTP Request Smuggling, what it is, how to find it and how to stop it by @AaronJB 
• How to quickly protect your Cloudflare CDN with F5 Distributed Cloud Bot Defense by @Ted_Byerly 
• How I did it - "Remote Logging with the F5 XC Global Log Receiver and Sumo Logic" by @Greg_Coward 

 Videos

• How To Create Namespaces In The F5 Distributed Cloud Managed Kubernetes
• How to Quickly Protect Your Cloudflare CDN with F5 Distributed Cloud Bot Defense
• This Month In Security Episode 09: March, 2023 w/ Ben Edwards

 

Forum post highlights: 

@fredlubrano shared a  custom response specific to aWaf adapted for the API and status code (406), ex for Maximum Length  

@Kevin_Davies shared how to Get Started with F5 NGINX Plus, Ingress, App Protect and Management Suite 

Notable solutions:

• @Margvin asked a timely question about how to get up to speed on LTM and GTM, and @Paulius posted the link to paid and freetraining available through F5 Services
• @pinkzeppelin asked how to add date and time to ASM response pages, and @Daniel_Wolf had the iRule for the job
• @Ireda was having difficulty migrating from Citrix to F5, and @Paulius had some help

I've got to call out @Paulius and @Enes_Afsin_Al for both being really active and helpful over this past week - thanks so much for all the assists, gentlemen! 

Unanswered questions:

• My teammate @buulam would like to know How's your API security strategy since last year? 
• @etherchannel01 is having an issue with a SAML error
• @David_Wallis  wants to know how to create a log entry in /var/log/ltm via iControl 
• @Sarah is dealing with a C3D issue where theapp server is unable to authenticate the client and getting "invalid thumbprint... 
• @jayantand is having a problem with TSPD cookie injecting an extra field which crashes the app 

Weekly community stats (excluding F5 employees):

Most kudoed authors 

• @Paulius
• @Daniel_Wolf 
• @CA_Valli 

 Gave the most kudos:

• @Michael_Saleem 
• @CA_Valli 
• @AlexBCT 

Top kudoed posts:

• custom response specific to aWaf adapted for the API and status code (406), ex for Maximum Length  by @fredlubrano 
• @CA_Valli's response to What is this certificate for? 
• Get Started with F5 NGINX Plus, Ingress, App Protect and Management Suite by @Kevin_Davies 

 

F5er stats:

Most kudoed: 

• @Koichi 
• @Dharminder 
• @MichaelOLeary 

Gave the most kudos:

• @MegaZone 
• @Rajiv_Goel 
• @slopatin 

Top kudoed posts:

• Microsoft's Strike on Cybercriminals and SFX backdoor- April 1st-April 7th - This Week in Security by @Dharminder 
• How to quickly protect your Cloudflare CDN with F5 Distributed Cloud Bot Defense by @Ted_Byerly 
• HomeRouter, JokeRFC, Copilot, AttackToAI - March 25th - 31th, 2023 - F5 SIRT - This Week in Security by @Koichi