Forum Discussion

tboemker's avatar
tboemker
Icon for Nimbostratus rankNimbostratus
Jan 31, 2022

Analyzing F5 OWASP rule matches

I am seeing lots of requests that match the following rules: rule_XSS_script_tag__Parameter__AllQueryArguments_Body rule_div_tag__behavior__Parameter__AllQueryArguments_Body rule_chmod_execution_a...
cloud
F5 Rules for AWS WAF
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jan 31, 2022

Do you have source documentation for what you're referencing? Any details will be helpful, I'll see if I can track this down for you internally.

  • tboemker's avatar
    tboemker
    Icon for Nimbostratus rankNimbostratus
    Jan 31, 2022

    These rules are part of the F5 OWASP managed rule set. That's all the documentation I have.

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Jan 31, 2022

      URL for the product? Want to make sure we're looking at the same thing. Don't have much exposure to the aws waf f5 rules.