For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

2 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Jan 25, 2017

    StewartL, what logging profile have you assigned? If it's All Requests then simply browsing the site will generate logs. To see illegal requests then does the site have search fields you can input sample malicious scripts? Or can you construct http requests which violate the RFC violations e.g. IP address as host header.

     

    Just a few options.

     

    HTH

     

    N

     

  • Stephan_Mierau's avatar
    Stephan_Mierau
    Icon for Employee rankEmployee
    Jan 26, 2017

    you could also use a tester like ZED or Burp to test the site, this should give you enough log output