For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MiLK_MaN's avatar
MiLK_MaN
Icon for Nimbostratus rankNimbostratus
Sep 09, 2014

ASM with Invalid File Types and poor web coding

Hi all,   We are controlling allowed file types with an ASM policy, but found some poor web coding is leading the ASM to identify a particular URL as having a weird file type.   The end of a pa...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Sep 09, 2014

Is the uri repeatable or matching a pattern? Could you direct that traffic to a seperate asm policy with all file types allowed? That way u still get negative policy enforcement.

 

N