For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smalex's avatar
smalex
Icon for Altostratus rankAltostratus
Jul 17, 2019

Content-length Detected as 0; False detection ASM

There are many blocks that I can see for reason 'post request with content-length 0' but those are genuine requests. What could cause this false detection? Please guide      
application delivery
ASM Advanced WAF
security
Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Jul 17, 2019

Yes so ASM treats this as a - HTTP Parser Attack, because the content length should be a positive number. If there are valid requests then disable - Content length should be a positive number under - HTTP protocol compliance.

smalex's avatar
smalex
Icon for Altostratus rankAltostratus
Jul 17, 2019

We would not want to disable this check. I would like to know reason why it is detected as content 0 when it is actually not. It is a registration page and even when all fields are filled, page is detected as content 0.