Forum Discussion
Gregory_Gerard_
Nimbostratus
Jun 08, 2008Enforcing Content-Length and other preventive security measures
I've been challenged with an audit. I know the tool in question to be used and have read the docs and whitepapers (sorry, cannot reveal).
Things mentioned within them include:
1....
hoolio
Cirrostratus
Jun 09, 2008You could potentially handle some HTTP protocol validation in an iRule, but you'd probably need to parse the raw TCP (as opposed to using HTTP::commands) as you're looking for invalid HTTP or corner cases in the use of the protocol. If it's an option for you, the Application Security Manager (ASM) would provide much better validation of HTTP and add a lot more flexibility and ease than you could ever get to with an iRule. You can check with an F5 salesperson to get more information on the functionality ASM offers. I think you'll find it meets or exceeds what you're trying to achieve.
Aaron
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects