For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MAbbas's avatar
MAbbas
Icon for Cirrus rankCirrus
Jan 18, 2021

asm policy for text in response JSON

hello All-

i am trying to create a ASM policy -- the condition is --

if an IP address - request -- gets a text in JSON body- data : "INVALID"

5 times in a row -- start dropping requests from that IP address

how would i go along creating this policy -- all help/ideas appreciated

thanks

application delivery
ASM Advanced WAF

1 Reply

  • Nikoolayy1's avatar
    Nikoolayy1
    Icon for MVP rankMVP
    Mar 27, 2021

    Do you have a JSON or XML profile under the policy if yes check what is allowed:

     

    https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-0-0/20.html

     

     

     

    Also there many things that can cause this so a screenshot of the alarm will be nice.

     

     

    Many issues:

     

     

    https://support.f5.com/csp/article/K58055038

     

    https://cdn.f5.com/product/bugtracker/ID935865.html

     

    etc.