For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Feren's avatar
Feren
Icon for Nimbostratus rankNimbostratus
Mar 25, 2022

AWAF/ASM Server Technology "CGI"

Hello experts, I am not a web ddveloper and am confused by AWAF/ASM Server Technology "CGI" and don't know if I am to include it in as ASP. Is there a definitive indicator for such ? Wikipedia stat...
security
xRes's avatar
xRes
Icon for Cirrus rankCirrus
Mar 25, 2022

Hi Feren

You should include both CGI and PHP in your "Server Technologies". PHP can be used as a module or CGI program. Should it, but any unfortunate reason, be used as CGI, then the server can be open to vulnerabilities you should worry about. The usage of PHP does not imply CGI - and vice versa.

Use this link as reference to short description of server technologies: https://clouddocs.f5.com/products/waf-declarative-policy/server_technology.html

Regards

xRes