Forum Discussion

JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Nov 26, 2018

ASM: "Illegal Request"

I have come across a weird problem. A user access was blocked, with a support ID displayed. After searching the event log withe the support ID, I found that there was no learning suggestion for the a...
ASM Advanced WAF
illegal request
security
unblock
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Jan 12, 2019

ASM will not generate learning suggestions for some violations, probably that is why there was no learning suggestion to accept, see support article K14945:

 

https://support.f5.com/csp/article/K14945

 

  • Cookie not RFC-compliant
  • Illegal HTTP format
  • Non-RFC request
  • Evasion Technique Detected
  • Access Violations
  • Illegal HTTP status in response
  • Illegal session ID in URL
  • Login object expired
  • Login object bypassed
  • Request length exceeds defined buffer size
  • Input Violations
  • Failed to convert character
  • Forbidden Null in request
  • Illegal number of mandatory parameters
  • Null in multi-part parameter value
  • SOAP method not allowed
  • Cookie Violations
  • Expired timestamp
  • Modified ASM cookie
  • Wrong message key