For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jayesh__Patel_3's avatar
Jayesh__Patel_3
Icon for Nimbostratus rankNimbostratus
Nov 14, 2018

F5 ASM - Parameter Meta Character Not Blocking

Hello,   I have an issue where parameter meta characters are not being blocked. See screenshots below,   The policy is set to blocking, i have set the parameter length to a max of 5 ...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Nov 21, 2018

The configuration you highlight in the second screenshot is the parameter value not name. A parameter is a name/value pair. In this case name = id and value = something (but should block if you add a disallowed entry)