For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Feb 06, 2021

in lieu of a signature, this should be an easy block by adding a disallowed parameter as such:

CP=%2fweb.config
  • THE_BLUE's avatar
    THE_BLUE
    Icon for Cirrostratus rankCirrostratus
    Feb 06, 2021

    but is this mean there is no pre-defied signature from F5 ASM ?

    if i have not add this parameter as disallowed, does ASM will pass the traffic with no block ?

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Feb 06, 2021

      You can check your signatures to find out by following the guidance here: https://support.f5.com/csp/article/K45558510

       

      if there is a signature and you’ve applied it it should block. If there is no signature you will need to add a parameter to do so.