For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aurel's avatar
Aurel
Icon for Cirrus rankCirrus
Mar 26, 2019

ASM: Wrong charset on policy, what's the impact ?

Hello,   An UTF-8 encoding/charset application is protected by ASM, on which the policy has been set to another one : iso-8859-15.   I am considering to set a new policy with the proper charset...
ASM Advanced WAF
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Mar 27, 2019

ASM must know the character set so it can evaluate requests based on the correct encoding. It checks if the byte sequence is correct for the specified application language. Attack signatures are useless if the application language is incorrect and learning suggestions would be meaningless.