Forum Discussion
a-vg-ops
Nimbostratus
NimbostratusAWS WAF ruleset OWASP_Managed rule SSRF_attempt_AllQueryArguments_Body
In our Amazon project, WAF blocks legitimate requests according to the rule_SSRF_attempt_AllQueryArguments_Body rule. How can I find out the reasons and allow traffic to pass without affecting secur...
Heath_Parrott
Employee
EmployeeA signature based WAF is just that. To bypass a signature, the signature must be disabled. AWS WAF and all the managed rules on top of it fight this category. If you need a WAF this is highly tuned to your application stack then you will need to look for a more robust WAF such as Adv. WAF.