For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Yanik's avatar
Yanik
Icon for Altocumulus rankAltocumulus
Dec 24, 2023

Body in GET or HEAD requests

Hello All ! Is there a way to allow only "Body in GET or HEAD requests" and not all the HTTPS Compliance in the ASM Policy ? Thanks  
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 26, 2023

Hi Yanik,

just go to  Security ›› Application Security : Policy Building : Learning and Blocking Settings, choose your policy from the drop down menu and enable / disable the violations from the HTTP protocal compliance failed section. Save and apply policy.

 

KR
Daniel