For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

grisu's avatar
grisu
Icon for Nimbostratus rankNimbostratus
May 17, 2023

AWS WAF Rule F5-OWASP_Managed custom response

Hi!

We are using AWS WAF managed rule 'F5-OWASP_Managed'. I would like to create a WAF custom response when requests are blocked by this rule. To do so I need to change the rule from block to count, and capture labels assigned by this rule in a WAF custom rule.

When looking into the AWS WAF console I cannot see any labels assigned to this WAF rule? Can somebody please tell me if this rule assigns labels, and, which one?

Thanks

F5 Rules for AWS WAF
security

3 Replies

  • Leslie_Hubertus's avatar
    Leslie_Hubertus
    Ret. Employee
    May 19, 2023

    Hi grisu FYI - we've asked a colleague who is an expert in this, and he is looking into this. He told us that he plans to respond to you next week.

  • Joel_Cohen's avatar
    Joel_Cohen
    Icon for Employee rankEmployee
    May 25, 2023

    Hi grisu ,

    The F5 Rules for AWS WAF do not add labels. This is somthing we are looking into adding.

    Thanks.

    • AntoineA's avatar
      AntoineA
      Icon for Nimbostratus rankNimbostratus
      Sep 19, 2023

      Hello Joel_Cohen, 

      Do you have any kind of news around this update ?
      This feature could really help us to manage fake positives triggered by the fortinet rule.

      Thanks