Forum Discussion

ghost-rider_124's avatar
ghost-rider_124
Icon for Nimbostratus rankNimbostratus
Jun 24, 2014

ASM Learning Fine Tuning (illegal meta characters in value)

Hello Experts   My ASM policy is in transparent mode and configured as manually that is through wildcards for URL, Parameters and file types.   I am getting violations "illegal meta characters...
ASM Advanced WAF
deployment
security
  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Jun 24, 2014

    Hi,

     

    1. You must decide wich meta characters is allowed for the parameters.
    2. If you accept suggestion for wildcard parameters illegal meta characters would be accepted for all parameters but not for particular learned parameters.
    3. Allowed: Specifies that the character or meta character can occur in parameter values. Disallowed: Specifies that the character or meta character can not occur in parameter values.
    4. This settings came from /Security/Application Security/Parameters/Characters Sets
MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Nov 24, 2015

If we want to allow some character then we must unblock the "illegal meta character in value" from Blocking --> Setting --> Input violation.

 

Please suggest.