Forum Discussion
ASM Custom attack signature rule
I want to block some specific keywords in my post request like i.e Block through an attack signature. What would be the script for Rule section in attack signature creation page.
I have created below script can some one validate this please and correct me where I am wrong.
content:"Block";nocase; to search the keyword block
uricontent:"POST"; to find the method in request line it should be POST
- Richard_Karon
Employee
Here is v14.1 writing custom attack signatures
https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/big-ip-asm-attack-and-bot-signatures-14-1-0/04.html
Here is an demo video
https://www.youtube.com/watch?v=1JsUdHQq3Ug
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com