Forum Discussion

amolari's avatar
amolari
Icon for Cirrus rankCirrus
Jan 04, 2016

HSTS and APM (ssllabs)

hi   trying to achieve a grade a+ with ssllabs for my VS that have an Access Policy bound.   I'm running v12 and use the HSTS setting in the HTTP profile.   Testing my website with SSLLabs, ...
BIG-IP Access Policy Manager (APM)
hsts
security
amolari's avatar
amolari
Icon for Cirrus rankCirrus
Feb 01, 2016

After upgrading to 12.0 HF-1 and using the above iRule, we had no issue with /my.policy (with and without On-demand cert auth).

 

Got from F5 support the existing BUGID 565554, which is about

 

  • not needing the workaround irule anymore (ID is mentioned in the irule above)

++ additionally:

 

  • missing HSTS header randomly seen (when serving APM objects)

Alex