For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mwitt_65218's avatar
mwitt_65218
Icon for Nimbostratus rankNimbostratus
May 26, 2009

1) F5 creating Global parameter when I have already Object parameter 2) Illegal Request and Object Lengths

Greetings,     I had created the parameter called username and made it an object parameter with Object Path HTTPS and /https://secure.stinson.com/bds/Loginsubmit.do. I allowed the Meta Cha...
app sec
BIG-IP Access Policy Manager (APM)
security
Benjamin_9036's avatar
Benjamin_9036
Historic F5 Account
May 28, 2009
Heya,

 

 

The object should be the path, not including the protocol, address, and/or port. Here is some of the ASM documentation for creating Web Objects (which are now called 'URLs' in v10).

 

 

https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm_945_config_guide/asm_security_policy.html1010165

 

 

And here is some web documentation on the portions of the URI: http://en.wikipedia.org/wiki/Uniform_Resource_LocatorSyntax

 

 

Using the nomenclature in the syntax section of that article, the "pathname" is the portion that makes up your web object.

 

 

You might want to create a new policy, just for looking at, and use one of the Application Templates. So "Policy List -> Create" and add a name, and from the drop-down selection for "Security Policy Template" pick one of the applications, and click "Create". Then you can browse around this policy to see (roughly) what a finished policy would look like. Mainly, you can see the format of the web objects in a policy for a specific application.

 

 

Cheers!

 

 

// Ben