For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ghislain_Pellet's avatar
Ghislain_Pellet
Icon for Nimbostratus rankNimbostratus
Jan 18, 2017

ASM Blocked Request Redirect URL:

The ASM blocked request is configured to redirect to a URL like this:   http://www.myredirectpage.com/block_pg.php?support_id= <%TS.request.ID()%>.   Besides the support ID, are there any other...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2017

There are no other documented parameters apart from SupportID you can use on redirect.

 

It is not a good practice to include that information on the URL anyway, as it will be giving too much information to the attacker, who may find a way around your ASM policy and hack in. Unique reference number (SupportID) is all you should be giving to the users (who can be hackers).