Forum Discussion
THE_BLUE
Cirrostratus
CirrostratusHeader Based content profile
If i have form with Content-Type: multipart/form-data; boundary ................ that require file upload , when any file attached it is give attack signature detect. i have tried to add some ch...
Lidev
Nacreous
NacreousHi BLUE,
Yes, ASM does carries out certain checks on file upload : https://support.f5.com/csp/article/K01235989
Can you specify which signature attack is raised and its details ?
Regards
THE_BLUECirrostratus
Cirrostratusexample :
"arp" execution attempt , but no detalis in payload related to files type.
but sometimes i can see in payload pdf , jpg and so on. something like encoding.
is there any change i have to apply under attack signature in learning and blocking settings?
how can i understand where ASM detect the attack ?
because sometimes i can not understand (only letters and characters ).
do i have to enable attack signature in policy based on server technologies or what ?
appreciate your help.
