Forum Discussion

RiverFish's avatar
RiverFish
Icon for Altostratus rankAltostratus
Sep 25, 2012

HTTP header security concern

Greetings, we are currently running BIG-IP 10.2.2 Build 763.3 Final. One of our software engineers sent me the email below:   " I have concerns that the F5 could potentially allow certain HTTP hea...
app sec
BIG-IP Access Policy Manager (APM)
security
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Sep 25, 2012
So, I guess you need to validate the client certificate first. I'm not experienced enough to help with that but this article will be a good starting point for you: https://devcentral.f5.com/wiki/irules.ClientCertificateCNChecking.ashx