For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeff_Nguyen_449's avatar
Jeff_Nguyen_449
Icon for Nimbostratus rankNimbostratus
Jun 09, 2016

Cross Frame Scripting flagged by HP Web Inspect

we got flagged with "Cross-Frame Scripting" by HP Web Inspect for some of our apps. Has anyone run into this issue. What measures have y'all used on the F5 to mitigate the issue? Thanks!

 

ASM Advanced WAF
LTM
security

1 Reply

  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Jun 10, 2016

    Can you import that WebInspect scan output XML file into an ASM policy? And review the vulnerabilities? It's very likely that ASM can resolve that type of violation most likely with attack signatures.