For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Giridharan_2650's avatar
Giridharan_2650
Icon for Nimbostratus rankNimbostratus
8 years ago

AWS F5 Managed WAF rules not blocking the vulnerabilities

We have subscribed to the AWS Managed WAF rules in our AWS instance and attached with to a WEB ACL and ALB for testing . The default condition for the Rule Set is configured to block and we tried inj...
aws
cloud
F5 Rules for AWS WAF
Avalanchee's avatar
Avalanchee
Icon for Nimbostratus rankNimbostratus
8 years ago

Giridharan, Thank you for your feedback and interest in the AWSWAF F5 Rules product.

 

We are routinely working to improve the F5 Rules product to fix coverage issues. Please feel free to provide any further details regarding the sample OWASP SQL/XSS you used.

 

Please note that the AWS Managed WAF solution only provides coverage against common and simple attack vectors, and is not meant to replace a state of the art WAF solution.