For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

carolyndiep_163's avatar
carolyndiep_163
Icon for Nimbostratus rankNimbostratus
Nov 24, 2015

ASM Global and URL Parameters

When initially building the policy using the fundamental policy type for the the automatic policy builder, it chose global as the parameter level. I have some parameters in my policy already, but aft...
ASM Advanced WAF
security
carolyndiep_163's avatar
carolyndiep_163
Icon for Nimbostratus rankNimbostratus
Dec 03, 2015

I tweaked around the policy and was able to get the level of detail that I am looking for, but was curious as to why you said in your initial answer that there is now additional security benefits by having more parameters and no wildcard. I can understand the overhead issue, but with having more granular details will allow for granular security controls.

 

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Dec 03, 2015
I believe you're correct and I overexadurated a bit. With that said, you really need the granularity down to individual parameters if there"s a lot of (expected) uniqueness across parameter configurations. I find with my customers that unique configurations are needed for a few, up to 5 sensitive parameters, and a generic configuration (wildcard) will suit for the rest. In the end, if you have the time, why not dig deeper... Have a great day!