Forum Discussion

david_berg_3177's avatar
david_berg_3177
Icon for Nimbostratus rankNimbostratus
Mar 03, 2019

ASM doesn't show violation occurrence name in logs

hi everyone i have a problem with asm event logs.for some blocked requests it doesnt show any violation occurrence name in event logs and i cant understand the reason that request has blocked?i have attached a screenshot.

 

ASM Advanced WAF
security
  • samstep's avatar
    samstep
    Icon for Cirrocumulus rankCirrocumulus
    Mar 04, 2019

    What version of BIG-IP are you using? On your screenshot under attack types you can see 3 attacks listed:

     

    • Path Traversal
    • SQL Injection
    • Cross-Site Scripting (XSS)

    Because it is a POST request it might be a mmulti-part one, so you need to inspect it in full to understand what's going on

     

  • david_berg_3177's avatar
    david_berg_3177
    Icon for Nimbostratus rankNimbostratus
    Mar 05, 2019

    thank you for your response. big-ip version is 13.1.0.8. please look at the screenshot below:

     

     

    above the URI there is violation name and i can find why the request has blocked. but previous screenshot doesnt show any violation name(for example if it is an attack, what is the signature id and ...)