For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cdjac0bsen's avatar
cdjac0bsen
Icon for Nimbostratus rankNimbostratus
Apr 11, 2018

file upload on parameter: Ignore Value or File Upload, which is better or appropriate?

We have an app that allows document uploads using a parameter. If a user uploads an html doc, for example, it trips 10's of attack signatures. It isn't practical to disable each signature because m...
ASM Advanced WAF
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 18, 2018

yeah, you will probably be disabling attack signatures forever.

 

there isn't the right way, it depends a lot on internal rules and how strict you wanna be.

 

so if you want to not think about it, ignore value. if you want some control file upload (it helps against uploading executables for example: https://support.f5.com/csp/article/K90728313)