For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JM_176957's avatar
JM_176957
Icon for Nimbostratus rankNimbostratus
Jul 11, 2017

ASM - disabling or unblocking attack signatures - on active blocking policy

Hi John, I have a query regarding disabling an attack signature on an active blocking policy. we have identified a few attack signatures in an ASM policy is generating false positive blocks in our e...
ASM Advanced WAF
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Jul 11, 2017

Hi Jobi,

 

In ASM, you disable an Attack Signature by two ways :

 

First way, is as you mentioned by doing it globally by editing the ASM policy from " Security ›› Application Security : Attack Signatures" then "Changes Properties"

 

The second way (not always possible because it will depend on the attack signature itself), is to disable it from the specific entity for example on the "Parameter names" if you have checked your policy to check signature on Parameter Names or Values.

 

Hope it helps

 

Regards