Forum Discussion
Evasion technique false positive
Hi Experts,
We have a requirement to relax evasion technique checks for a specific application. Is it possible to do using an irule. We are using ASM_REQUEST_DONE event for Negative signature block relaxation. Similar way , could you please let me know the way to relax evasion technique.
when ASM_REQUEST_DONE { if { [ class match [HTTP::host] contains hostname_dg ] and [ class match [HTTP::uri] contains URI_dg ] and [ class match [ASM::violation details] contains "sig_data.sig_id signature" ] } { ASM::unblock } }
1 Reply
would a different ASM profile not be an option?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com