Forum Discussion
natethegreat_23
Nimbostratus
NimbostratusCan I allow Buffer Overflow attack signatures in just an XML request?
The website has an upload page where people can submit receipts. The request looks like this:
4AAQSkD6RXhpZgAuocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...
gsharri
Altostratus
AltostratusYou can create an XML content profile, disable the attack signature in it and then assign the profile to a URL in your security policy.
You didn't say what version you are running. Here is some info for version 12.0. The config is basically the same for other versions:
Fine-tuning Advanced XML Security Policy Settings