For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mkeenan_289714's avatar
mkeenan_289714
Icon for Nimbostratus rankNimbostratus
Oct 09, 2016

Copying System-Supplied Attack Signatures for Modification

Is it possible to copy a System-Supplied Attack Signature so that I can modify the copied signature and apply it to a custom Signature Set?   For example - While in staging, a System-Supplied Att...
ASM Advanced WAF
security
aswinnen_6967's avatar
aswinnen_6967
Icon for Nimbostratus rankNimbostratus
Aug 14, 2018

I think the following query is more useful, as it lists which signatures are assigned to which signature set:

mysql -uasm -p`perl -I/ts/packages -MF5::Cfg -e 'print F5::Cfg::get_mysql_password()'` PLC -e "
select 
PLC.NEGSIG_SETS.set_name,PLC.NEGSIG_SET_SIGNATURES.set_id,
PLC.NEGSIG_SET_SIGNATURES.sig_id,PLC.NEGSIG_SIGNATURES.sig_name, 
from 
PLC.NEGSIG_SETS,PLC.NEGSIG_SIGNATURES,PLC.NEGSIG_SET_SIGNATURES 
where
PLC.NEGSIG_SETS.set_id = PLC.NEGSIG_SET_SIGNATURES.set_id 
and PLC.NEGSIG_SET_SIGNATURES.sig_id = PLC.NEGSIG_SIGNATURES.sig_id 
order by 
set_name,PLC.NEGSIG_SIGNATURES.sig_id ;"
 > /var/tmp/device-signature-set.out