Forum Discussion

Alex_f5's avatar
Alex_f5
Icon for Altostratus rankAltostratus
Oct 17, 2018

ASM allowed URLs with header based content

hello community, I would like to get clear my ideas about the allowed urls in the ASM ... I do have an ASM policy which is still in staging but I have found some violations in JSON posts that are fa...
ASM Advanced WAF
security
Alex_f5's avatar
Alex_f5
Icon for Altostratus rankAltostratus
Oct 21, 2018

Hello Scott, the violation found are:

 

  • Evasion technique detected
  • Failed to convert character
  • HTTP protocol compliance failed

But is my my understanding that if we just allow the URL and we add a header based content profile that matches a specific value in the http header then the ASM will not generate a log even if other violations are found, am I wrong?, thank you !