Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 05, 2012

CSRF Protection Query

Hello,     Have a query on CSRF protection. In ASM in Policies -->CSRF Protection screen , the user needs to specify the specific URLs of the webapp to protect. I ran a appscan scan on my webapp...
config
design
Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Mar 28, 2012

 

Hello Aaron,

 

 

I have asm 10.2.2 running. I did try the wildcard expression, but dont think it works

 

 

I added https://siteURL/* in the CSRF protection page. I then did a explore with a scanner which conducted the CSRF

 

tests. However the asm traffic learning screen did not flag it as an event.

 

 

Queries

 

1) Firstly, Will this approach (described above) work in asm version 11

 

2) How can CSRF protection be achieved in asm version 10.2.2

 

 

regards

 

Nik