For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PowerShellDon_1's avatar
PowerShellDon_1
Icon for Nimbostratus rankNimbostratus
Mar 02, 2017

ASM - Best way to filter out requests containing tilde ~ character?

For PCI, they don't like IIS accepting requests with Tilde (~) characters.   I'm presuming ASM is the perfect place to apply a fix for this, can someone help?  
application delivery
ASM Advanced WAF
BIG-IP
security
Chris_Grant's avatar
Chris_Grant
Icon for Employee rankEmployee
Mar 02, 2017

This answer is pulled off of a 12.1.0 box (simply because that's what I have up at the moment), but you can disallow characters here:

 

Security ›› Application Security : Parameters : Character Sets : Parameter Value

 

tilde appears to be disallowed by default.