Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Yanik's avatar
Yanik
Icon for Altocumulus rankAltocumulus
Dec 23, 2023

Body in GET or HEAD requests

Hello All ! Is there a way to allow only "Body in GET or HEAD requests" and not all the HTTPS Compliance in the ASM Policy ? Thanks  
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 26, 2023

Hi Yanik,

just go to  Security ›› Application Security : Policy Building : Learning and Blocking Settings, choose your policy from the drop down menu and enable / disable the violations from the HTTP protocal compliance failed section. Save and apply policy.

 

KR
Daniel