For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dave_Pisarek's avatar
Dave_Pisarek
Icon for Cirrus rankCirrus
Jan 09, 2020

ASM disallowed url %

All,   Running into an issue with disallowed url on ASM. We needed to block the ecp in owa like so https://owa.host.com/ecp, this works as expected just by adding /ecp in the disallowed list. If ...
ASM Advanced WAF
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jan 16, 2020

Is request logged with /ecp URL in second case?

As I see, in second case you send /ecp URL in query string parameter, that is why disallowed URL doesn't have affect on it.

To block all requests with /ecp in URL or in query string you can create attack signature like uricontent:"/ecp"; nocase;