Forum Discussion
hooleylist
Mar 28, 2012Cirrostratus
Hi Nik,
I generally don't define every URL for a web app in a policy. I define the filetypes and lock down the metacharacters for URLs and the rest of the charsets. I then define explicit URLs if there are is a character set violation for a URL. If there are odd metacharacters in the URLs, then a crawl of the site might help. Or if you have a lot of filetypes it would help to run the crawler.
Are you able to put the policy in transparent mode on a production virtual server that does receive traffic?
Aaron