Clickjacking

Question

Hello,&nbsp;
We are at V11.4 and our PCI scan still show Clickjacking problem. F5 website mentions that it was solved by v11.4.&nbsp;
I know we can overcome this problem by writing iRule, however we will need to add that iRule to every VS we have and we do have a lot of them, so that is not efficient. 
https://devcentral.f5.com/questions/clickjacking-protection-with-x-frame-options&nbsp;
any recommendations? --thank you&nbsp;

mark_van_d · Answer

Hi Jaz,&nbsp;
The iRule option is probably the easiest route to take, alternately if you are running ASM you can use that for clickjack protection.&nbsp;
https://support.f5.com/kb/en-us/products/big-ip_asm/releasenotes/product/relnote-asm-11-4-0.html&nbsp;
Mark&nbsp;

Forum Discussion

Clickjacking

Recent Discussions

Cisco ISE Load Balancing

What is the use of epsec-package file in APM ?

[APM] - Error: failed to reset strict operations; disconnecting from mcpd

How to backup automation Which BIG IP already integration to BIG IQ CM

dns config is not sync to standby f5 for HA cluster

Related Content

Clickjacking Protection Using X-FRAME-OPTIONS Available for Firefox

Adding Security HTTP Headers with an iRule for HSTS, XSS, Clickjacking and Content Web Protection

clickjacking

Clickjacking iRule assist

Clickjacking protection with X-Frame options