Follow

Q&A: Can Silverline Insert HSTS Header (HTTP Strict Transport Security)?

 Question

  • Can Silverline insert HSTS header to the HTTP response traffic?

 

Environment

  • Silverline WAF
  • HSTS - HTTP Strict Transport Security
  • iRule

 

Answer

  • Yes, Silverline can insert HSTS header via an iRule 
  • when HTTP_RESPONSE_RELEASE priority 350 { 
    if {![HTTP::header exists "Strict-Transport-Security"]} { 
    HTTP::header insert "Strict-Transport-Security" "max-age=16070400; includeSubdomains" 

    }

In order to implement this iRule, create a ticket with SOC and provide desired name for your iRule.

 

Related Content

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request