For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohanty_164485's avatar
Mohanty_164485
Icon for Nimbostratus rankNimbostratus
Jul 23, 2014

automatic policy building

Is it possible to do automatic policy building (in F5 – ASM) by reading metadata of a http/ODATA service instead of examining the request response from different sessions ?

 

Example: If service has a metadata Firstname 40 char length. Can we define a rule to validate Firstname as alphanumeric and max char length.

 

2 Replies

  • Mohanty_164485's avatar
    Mohanty_164485
    Icon for Nimbostratus rankNimbostratus
    Jul 23, 2014
    There are two parts to the Question. 1. Can we define a rule in ASM to validate input field Data Type and Length 2. Can this be automated for a http/ODATA service , since the metadata is very well defined Thanks Mohanty
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Icon for Nacreous rankNacreous
    Jul 24, 2014
    1. You always define a data type for any input field in ASM. Length checking is built in as well.
    2. No. You could define a example field and data type that matches ODATA, export the policy as XML. Find the relevant section and then script the adding of multiple similar sections. Then import the policy back into ASM. That would be the closest you will get.