Forum Discussion

R__Winters_7757's avatar
R__Winters_7757
Icon for Nimbostratus rankNimbostratus
Oct 21, 2010

Allowing default-disallowed characters

We are having an issue where users are getting blocked when they try and create or use a password that contains % or @. As these characters are disallowed by default, we are considering allowing them...
app sec
BIG-IP Access Policy Manager (APM)
security
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Oct 21, 2010
If the characters legitimately need to be used in the app, I wouldn't hesitate to relax the policy. Password fields are generally one parameter where you allow all standard ascii metacharacters assuming the application allows them. You can still use the attack sigs to provide protection.

 

 

Aaron