Forum Discussion
F5 ASM how to ignore URL query string parameter learning
Hi Team,
I'm facing issue with URL query string parameter learning. As per my knowledge any thing after '?' in URL is considered as query string parameter.
Sometimes query string parameter are not properly separated so ASM is not properly learning Parameter name like sometime club name of multiple parameter name as single parameter name. To ignore learning of query string parameter under security policy Security > Application Security > Security Policies Handle Path Parameters is set to ignore, But i can see ASM is learning query string parameter. Please suggest how to ignore query string parameter.
Thanks Sachin
4 Replies
- Hannes_Rapp_162
Nacreous
In your Security Policy (still in learning mode), do you have Wildcards Tightening enabled for parameters? If yes, that's the tickbox you should unselect.
- sachin_80710
Nimbostratus
Thanks Hannes, Security policy is in learning mode. Will try disabling wildcards tightening for parameter. Thanks, Sachin
- Hannes_Rapp
Nimbostratus
In your Security Policy (still in learning mode), do you have Wildcards Tightening enabled for parameters? If yes, that's the tickbox you should unselect.
- sachin_80710
Nimbostratus
Thanks Hannes, Security policy is in learning mode. Will try disabling wildcards tightening for parameter. Thanks, Sachin
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
