Forum Discussion
NimbostratusASM DCV
Hi,
This may sound like a dumb question, But what is the difference between a dynamic parameter and something like a username parameter ?
3 Replies
gsharriAltostratus
A dynamic parameters value may legitimately change on the server side but is not something that would change on the client side. Compare that to a user input value parameter where we expect the client side to provide the value. To protect dynamic parameters you must define an extraction so that ASM will record the parameters value found in the http response and store in the DCV cookie and then check that it has not been altered on the client side.
sb_2323_80570Many thanks, One last question.
What is the best way to detect a dynamic parameter ?
- gsharri
If you use ASMs Real Traffic Policy Builder to create the security policy it can attempt to detect dynamic parameters automatically for you. If manually building a policy you will need to get the application developers involved so that they can identify dynamic parameters in their app.
