Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

Custom Attack Signature to block request with No UA or Referer

I want to be able to check and see if the request is missing both the User-Agent String and the Referer, and possibly block the request. So I know I can do this with an iRule, but I am wanting to tr...
ASM Advanced WAF
attack signatures
security
Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

Yea, I am not sure that will accomplish what I am looking for. Which is to check if both Headers are missing. If a UA is present but the referer isn't I will still want to allow the traffic. Also I may need the ability to whitelist the signature for certain traffic.

 

It would be nice if in policy there was a way to attach mandatory header conditions per URL.