Forum Discussion
hoangnv
Nimbostratus
NimbostratusASM don't block attack XSS
hi all,
I enabled all the XSS signatures and all signatures are state no staging.
why the asm don't block this : <script>alert("attack")</script>
It match to some Attack Signature ID : 200101609 , 200001088, 200000098, 200001475
Here is state of signature ID 200001475
Thanks.
SamirMVP
its difficult to help you without seeing Request & Responce header... Good to open support case if you find issue..
- zamroni777
Nacreous
did that <script>..... come in server response or client request?
asm wont block it if it comes from server response.
hoangnvIt's client request, and asm has score 4 for event log this.
- Samir
Looks like you have not configure WAF policy properly or this attack signature may be not inheritted from Parent Profile. please check and adjust accordingly.
Thanks
- hoangnv
Hi Samir,
Could you share me some suggestion to check it.
