For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MajdaWazzan_186's avatar
MajdaWazzan_186
Icon for Nimbostratus rankNimbostratus
Nov 10, 2015

ASM add all function as file types

Hi

 

I face a problem when I accept URLs in ASM for an application that use Oracle g.11 the URLs ends with function name like : /TEST/rsdkmove.P_Current_Moves ASM adds rsdkmove.P_Current_Moves as allowed file type when I accept the above URL.

 

plz advice should I delete the file type from the allowed files or not.

 

thanks

 

ASM Advanced WAF
oracle
security

6 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 10, 2015

    Does it also add a new URL too, in the format above i.e. /rsdkmove.P_Current_Moves?

     

    I'd add the URL manually and not have the file type added. Do you have a wildcard file type?

     

    N

     

  • MajdaWazzan_186's avatar
    MajdaWazzan_186
    Icon for Nimbostratus rankNimbostratus
    Nov 10, 2015

    I didn't add the URL manualy, I accept them through the manual traffic screen as allowed URLs (/TEST/rsdkmove.P_Current_Moves ) and then it adds rsdkmove.P_Current_Moves as a file type.

     

    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      Nov 10, 2015
      Interesting. In that case I've not seen this myself before but I'd ignore the learning suggestion and add the URL manually then. Hopefully there are not too many to make this unfeasible. If you can wildcard it then all the better too e.g. /TEST/rsdkmove*
    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      Nov 10, 2015
      Can you wildcard the URLs? Do they follow a pattern?