Q&A: Can Silverline Insert HSTS Header (HTTP Strict Transport Security)?

 Question

• Can Silverline insert HSTS header to the HTTP response traffic?

Environment

• Silverline WAF
• HSTS - HTTP Strict Transport Security
• iRule

Answer

• Yes, Silverline can insert HSTS header via an iRule 

• when HTTP_RESPONSE_RELEASE priority 350 { 
      if {![HTTP::header exists "Strict-Transport-Security"]} { 
          HTTP::header insert "Strict-Transport-Security" "max-age=16070400; includeSubdomains" 
      } 
  }

In order to implement this iRule, create a ticket with SOC and provide desired name for your iRule.

Related Content

• Q&A: What iRules are Supported by Silverline?
• Q&A: Default HTTP Response Codes Allowed