Forum Discussion

saidshow's avatar
saidshow
Icon for Cirrus rankCirrus
Oct 31, 2019

HSTS / ASM connection drops

Hi All,   We currently implement HSTS as an iRule on the F5, we also decrypt and inspect traffic with ASM. There are discussions internally on our side about adding HSTS to the web server respons...
ASM Advanced WAF
decrypt
devops
hsts
iis
iRules
security
server
Samir's avatar
Samir
Icon for MVP rankMVP

No, I have enabled HSTS in F5 irule and vip has tagged with ASM policy. No issue found so far.

saidshow's avatar
saidshow
Icon for Cirrus rankCirrus
Nov 06, 2019

, that is what we have presently also and it works fine. Since we are looking at placing the HSTS in the app, the tunnel will be longer however the tunnel will need to be broken for ASM inspection - thus my expectation that this may cause a problem.