For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Check1t_282465's avatar
Check1t_282465
Icon for Nimbostratus rankNimbostratus
Dec 13, 2017

ASM Policy Allow traversal detection evasion only for specific URL

Our application is flagging legitimate requests for directory traversals. Learning option is to allow for application. Is it possible to allow for just one URL? For example, if I were to create a ...
ASM Advanced WAF
security
Ashwin_Venkat's avatar
Ashwin_Venkat
Icon for Employee rankEmployee
Jan 12, 2018

Hello,

 

Unfortunately, that's not possible in 12.x. We can only unblock requests based on signature IDs starting in v13 using the ASM::signature iRule command: https://devcentral.f5.com/wiki/iRules.ASM__signature.ashx. Otherwise, the only way to unblock these requests is based on the 'Attack signature detected' violation itself and not by virtue of any particular signature.