Forum Discussion
NimbostratusASM with Invalid File Types and poor web coding
Hi all,
We are controlling allowed file types with an ASM policy, but found some poor web coding is leading the ASM to identify a particular URL as having a weird file type.
The end of a particular URL has "NFL0x20Season0x20No.of0x20Wins", and ASM picks this file type up as " of0x20Wins". There's no real chance of us getting the app developer to modify this behaviour, and I'm struggling to think of a way to configure the policy around it other than turning off that blocking option in ASM.
Anyone with some smart ideas to get around it?
3 Replies
IheartF5_45022Nacreous
Can you bypass ASM processing for the path using a local traffic policy? http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-4-0/20.html
MiLK_MaNCould do that, or use an iRule with ASM::disable. Prefer not to, and wanted to see if there was any clever way other than not putting that traffic through ASM or having to disable Illegal File Type in the policy.
natheCirrocumulus
Is the uri repeatable or matching a pattern? Could you direct that traffic to a seperate asm policy with all file types allowed? That way u still get negative policy enforcement.
N
