Forum Discussion

P_Casoria_18761's avatar
P_Casoria_18761
Icon for Nimbostratus rankNimbostratus
Feb 16, 2015

ASM module - efficacy testing

Hello everyone, I've deployed an F5 BIG-IP 2000s with LTM and ASM inside my architecture and I need to test the efficacy of Web Application Firewall (ASM module).   I've deployed "WebGoat" applica...
ASM Advanced WAF
deployment
management
security
gsharri's avatar
gsharri
Icon for Altostratus rankAltostratus
Feb 17, 2015

Yes that could be the issue. By default most metacharacters like % are disallowed in parameter values in security policies. You should check the Blocking Settings list and enable alarm/block for "illegal metacharacter in value". The metacharacter settings can also be overridden on a individual parameter basis so you might want to check the parameters list and examine the settings of the parameters in question.