Forum Discussion
uni
Altocumulus
AltocumulusASM policy not blocking invalid host headers
I've trying to limit access to a specific hostname. I've added the desired host name in Security/Application/Headers/Host Names. The policy is enforcing (e.g. GeoIP blocking is working), but it still...
René_Geile
Cirrus
CirrusHi,
you allways need two parts for ASM features:
-
Configure the feature (i.e. define valid Host Headers, define valid methods)
-
Configure Blocking/Learning/Alerting for the violations of the features.
See Security- Application Security : Policy Building : Learning and Blocking Settings
Section "HTTP Compliance": Enable blocking. Enable all host header related subitems in this section. (Bad Host Header value, Host header contains an IP address...)
Section "headers" : Enable "blocking" for violation "illegal methods"
