Forum Discussion
AltostratusCustom Attack Signatures
We are migrating an ASM policy with custom attack signatures created by the user.
How can we translate this to an XC configuration?
These are SQL injection signatures.
Thank you in advance
Currently, F5 XC does not support creating custom attack signatures. However, service policies offer an alternative by detecting patterns in HTTP requests and block those that match.
3 Replies
Miguel_AlvaradoEmployee
Currently, F5 XC does not support creating custom attack signatures. However, service policies offer an alternative by detecting patterns in HTTP requests and block those that match.
- Nikoolayy1
MVP
Miguel_Alvarado F5 XC Distributed Cloud to support custom signatures is a good idea as service policies are not very good for POST request body match even if the option is there or they do not support matching on all HTTP headers or query parameters for example as the header or query parameter names need to be explicitly specified and can't be a wildcard.
Here is an https://www.f5cloudideas.com/ideas/CNSL-I-653 that we can vote on.
- Miguel_Alvarado
Nikoolayy1, thank you for tagging me. I’ve voted for the idea of having custom attack signatures in XC. :)
