Forum Discussion

ebeng_278441's avatar
ebeng_278441
Icon for Altocumulus rankAltocumulus
Apr 12, 2017

ASM Wildcard Parameter is still blocked, even with Override

Hi All,

 

Let me present the pictures first, and see what is going wrong here:

 

 

As you can see here, the page when requested, is being blocked by this Attack signature. Why the learn is now greyed out is, i have learned it via the suggestions, to override it with the specific parameter. Note that, The Illegal parameter is not in Block mode, its only alarming and learning.

 

I go now to the URL

 

I selected the URL Parameters. I created the * for wildcard options.

 

 

As you can see now, this Attack Signature has been disabled on this specific URL. But it is still Blocking! Am I overseeing something?

 

 

ASM Advanced WAF
devops
parameter

1 Reply

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Apr 12, 2017

    Hi,

    I think it was blocked in another context level (e.g. parameter) due the signature scope: 

    Name:       HTTP Headers Injection (5)
ID:         200018023
Signature Type: Request
Signature Scope:    Parameter, XML, JSON, GWT, Plain Text

    Regards.