Forum Discussion

Majda_Wazzan_18's avatar
Majda_Wazzan_18
Icon for Nimbostratus rankNimbostratus
Apr 28, 2015

ASM - how to protect a dynamic web pages

Hi 1. I face a problem with a dynamic pages since I have a website with an html editor then any user can add pages and upload files.   This cause URL rewriting problem. This mean that I don't h...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 03, 2015

Hi Majda, you clearly misunderstood the wildcard concept - these are not real URLs you can access in the browser, but in your ASM policy. "" when use din your F5 ASM policy means "any URL". When "" used in a URL you access with your browser it will not work - it is a disallowed meta-character and is rightfully blocked.

 

It appears that you are lacking training in F5 ASM. I highly recommend that you take an F5 ASM training course to gain understanding about web applications and how to protect them from attacks using F5 ASM module. Information about F5 ASM training course is available here:

 

https://f5.com/education/training/courses/configuring-big-ip-asm-v11-application-security-manager