Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Newton's avatar
Newton
Icon for Nimbostratus rankNimbostratus
Dec 21, 2020

Asm - Illegal url

Hi Why asm learned this request get hxxps://example.com/favicon.ico   As illegal url, and suggest to add *.ico to allowed url.   Why it is not detect as allowed file type?   Thanks ...
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Dec 22, 2020

Is your security policy configured to generate learning suggestions for file types? Go to learning and blocking settings and review the Learn, Alarm, Block checkboxes for Illegal File type--and also verify that the overall file type learning settings is set to "Always."