For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Newton's avatar
Newton
Icon for Nimbostratus rankNimbostratus
Dec 21, 2020

Asm - Illegal url

Hi

Why asm learned this request

get hxxps://example.com/favicon.ico

 

As illegal url, and suggest to add *.ico to allowed url.

 

Why it is not detect as allowed file type?

 

Thanks

 

ASM Advanced WAF
security

1 Reply

  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Dec 22, 2020

    Is your security policy configured to generate learning suggestions for file types? Go to learning and blocking settings and review the Learn, Alarm, Block checkboxes for Illegal File type--and also verify that the overall file type learning settings is set to "Always."