For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Bob_28727's avatar
Bob_28727
Icon for Nimbostratus rankNimbostratus
Nov 02, 2012

Custom block page with ASM

Hi,   I'm fairly new to the ASM and have very little experience with iRules (which I have a feeling will be the only way to accomplish what I want.)   Basically, I'd like to know if there's a w...
app sec
BIG-IP Access Policy Manager (APM)
security
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Nov 02, 2012
Unsure it would be a very good idea to inform the end user why the ASM is blocking the request. Sure it might be helpful in diagnosing false positives, but it also informs a malicious user why their attempts are being blocked.

 

 

The better approach would be to disable certain attack signatures on specific parameters or URLs/URIs. Yes it would probably take a while to build and get everything right, but you are using ASM for a reason.