Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Newton's avatar
Newton
Icon for Nimbostratus rankNimbostratus
Dec 21, 2020

Asm - Illegal url

Hi

Why asm learned this request

get hxxps://example.com/favicon.ico

 

As illegal url, and suggest to add *.ico to allowed url.

 

Why it is not detect as allowed file type?

 

Thanks

 

ASM Advanced WAF
security

1 Reply

  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Dec 22, 2020

    Is your security policy configured to generate learning suggestions for file types? Go to learning and blocking settings and review the Learn, Alarm, Block checkboxes for Illegal File type--and also verify that the overall file type learning settings is set to "Always."