Forum Discussion
Mike_Maher
Nimbostratus
Mar 19, 2013Different Blocking pages for different violation?
I have an application that is going to start uploading files to the application, so I am going to use the ICAP hook in that ASM has to an AV scan engine to inspect those files before they reach the s...
Mike_Maher
Nimbostratus
Mar 22, 2013Yes yes I forgot some brackets 🙂
when ASM_REQUEST_VIOLATION
{
set x [ASM::violation_data]
for {set i 0} { $i < 7 } {incr i} {
switch $i {
0 { log local0. "violation=[lindex $x $i]" }
1 { log local0. "support_id=[lindex $x $i]" }
2 { log local0. "web_application=[lindex $x $i]" }
3 { log local0. "severity=[lindex $x $i]" }
4 { log local0. "source_ip=[lindex $x $i]" }
5 { log local0. "attack_type=[lindex $x $i]" }
6 { log local0. "request_status=[lindex $x $i]" }
}}
{
set violation [lindex $x 0]
HTTP::uri "/error_handling/asmviolation.action?violation=$violation"
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects