F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Squeaky's avatar
Squeaky
Icon for Nimbostratus rankNimbostratus
May 05, 2017

ASM - CSRF Protection

Hi all,   I've enabled CSRF protection for an application defining a URL to be protected based on a recent external scan. However with the URL defined it appears accessing the URL has an issue for...
application delivery
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
May 05, 2017

Squeaky, CSRF injects javascript tokens into the application traffic so this may cause an issue. other than that, do you see any log entries to show traffic being blocked by the policy, and CSRF violations in particular (Security - Event Logs - Application - Requests). If you disable CSRF does the application work?