Forum Discussion
I_R_101_110
Cirrus
CirrusASM Blocking Response Code 500 Regardless of Being on Allowed List
Hello all,
We have a security policy that is blocking a request altogether because the response contains a violation of "Illegal HTTP status in response". The thing is that we've defined the particular error code 500 in the policy properties tab as an allowed response status code. Can anyone shed light and steer us in the right direction on why it's still triggering and how we can allow the response code through while still keeping the violation with it's block flag enabled?
1 Reply
Leonardo_SouzaCirrocumulus
I am not aware of any trick for this to work.
It is as simple as you described and is described in this solution:
https://support.f5.com/csp/article/K7922
