For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Stefan_Klotz_85's avatar
Stefan_Klotz_85
Icon for Cirrus rankCirrus
Dec 21, 2015

ASM disable violations just for specific requests

During creation and fine-tuning of an ASM-policy (based on manually Rapid Deployment) we found lots of valid requests, which trigger for example an Attack Signature or RFC compliances checks. But ins...
ASM Advanced WAF
security
waf
Tzoori_Tamam_95's avatar
Tzoori_Tamam_95
Historic F5 Account
Dec 21, 2015

I think that ASM::disable is a bit too harsh... It is preferable to unblock the specific request rather than disabling inspection totally.

 

Stefan_Klotz_85's avatar
Stefan_Klotz_85
Icon for Cirrus rankCirrus
Dec 21, 2015
Yes correct Jinshu, but if the policy for example contains 20 checks and I just want to disable 2 of them, I'm losing the security advantages of the other 18 as well. And this is what I want to avoid.