Forum Discussion
Kuyidong
Nimbostratus
May 28, 2026AWAF Detection Inconsistency Between Similar Test Payloads
Hi everyone, I'm testing F5 AWAF against several attack payloads in a lab environment (crAPI). I noticed some inconsistent detection behavior and ...
zamroni777
MVP
Jun 11, 2026incositently usually happens when the tested webserver (the pool member) has been compromized by your earlier attacks, e.g. script injection has been stored in the app's db.
if haven't, also set the Server Technologies config properly according to the tech used by pool member.
this config usually too strong for live use cases and needs to be loosen using learning from legitimate testers.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects