For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Nov 04, 2015

F5 ASM how to ignore URL query string parameter learning

Hi Team,   I'm facing issue with URL query string parameter learning. As per my knowledge any thing after '?' in URL is considered as query string parameter.   Sometimes query string parameter ...
ASM Advanced WAF
deployment
security
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Nov 04, 2015

In your Security Policy (still in learning mode), do you have Wildcards Tightening enabled for parameters? If yes, that's the tickbox you should unselect.

 

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Nov 04, 2015
Thanks Hannes, Security policy is in learning mode. Will try disabling wildcards tightening for parameter. Thanks, Sachin