Forum Discussion
ajayp
Nimbostratus
Nimbostratus'F5 rules for AWS WAF' ruleset not working for jsp web shell attack
I have subscribed to 'F5 rules for AWS WAF' Common Vulnerabilities & Exposures (CVE) Rules in AWS market place and protected the ALB's. Even after enabled, I see my web server got affected by jsp web shell attack and found war file deployed by unauthorized user.
Can you please let me know what are the rules available to protect from jsp web shell attack?
2 Replies
Hi ajayp,
The content of F5 rules is not visible and cannot be viewed.
REF: https://my.f5.com/manage/s/article/K21015971
You can also check buulam's answer.
- LiefZimmerman
Admin
ajayp - if this was solved for you please consider marking Enes_Afsin_Al answers as Solution.
