<div>
<a href="https://support.f5.com/kb/en-us/products/wa/manuals/product/wa_pmg_1000/wa_httpdata.html#1027192" rel="ugc">https://support.f5.com/kb/en-us/products/wa/manuals/product/wa_pmg_1000/wa_httpdata.html#1027192</a><br />
<br />
You need to add irule for response header to always add hsts header with long enough expiration.<br />
<br />
PS You can configure on backend too
</div>


https://support.f5.com/kb/en-us/products/wa/manuals/product/wa_pmg_1000/wa_httpdata.html#1027192 [https://support.f5.com/kb/en-us/products/wa/manuals/product/wa_pmg_1000/wa_httpdata.html#1027192]

You need to add irule for response header to always add hsts header with long enough expiration.

PS You can configure on backend too

<div>
<div class="content wysiwyg-content">
does anyone have step by step on how to configure HSTS on a F5 big-ip <br />
I believe its done via a irule<br />
im not familiar with irules, or f5 in general<br />
<br />
I assume the traffic from the f5 to web servers goes over http by default<br />
and HSTS needs &nbsp;to be configured <br />
<br />
thanks in advance
</div>
</div>


does anyone have step by step on how to configure HSTS on a F5 big-ip 
I believe its done via a irule
im not familiar with irules, or f5 in general

I assume the traffic from the f5 to web servers goes over http by default
and HSTS needs  to be configured 

thanks in advance

HSTS F5  big-ip

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Network security consists of the policies adopted to prevent and monitor authorized access, misuse, modification, or denial of a computer network and network-accessible resources. Network security involves the authorization of access to data in a network, and covers a variety of computer networks; conducting transactions and communications among businesses, government agencies and individuals. Networks can be private, such as within a company, and others which might be open to public access.

Network Security

HTML (HyperText Markup Language) is the main markup language for creating web pages and other information to be displayed in a web browser, providing both the structure and content for what is sent from a web server through the use of tags. The current implementation of the HTML specification is HTML5.