Forum Discussion
Create test for block page on non-existent path
Hello
I am trying to build an attack signature that will allow our team to visit a URL that does not exist on any of our websites to ensure the ASM is blocking for that site. This will also be used to test changes to the Response pages.
Is there any known way to create an attack signature that will block traversal to a path that does not exist on the server? This is the rudimentary testing signature that I put together from some documentation, but I don't seem to be getting the block\response page.
uricontent:"cmd.exe"; nocase; objonly;
Any help would be greatly appreciated.
Thanks.
- iaine
Nacreous
Hi
Your custom signature looks good to block requests with cmd.exe in the path. Is your signature still in staging and so therefore won't block the request? Have you enforced the signature on your policy so that it blocks these requests?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com