How do I permit a "-" character to be allowed in ASM

Hello,

 

You can do changing the policy globally on the character sets menu for url, parameters (name and/or value), headers, content profiles, or mitigating the false positive for each local occurrences (may be more secure). For the last option, you can gain some time with learn option enabled and mitigating it on the traffic learning screen.

 

I hope it help you.

 

Hi Edouard,

 

1. In the Main tab, click Security > Application Security > Parameters > Character Sets > Parameter Value

    

2. In the Current edited policy list near the top of the screen, verify that the edited security policy is the one you want to work on.

    

3. Use the View option to filter the character set

    

4. For each character or meta character, change the state, as required (allow or disallow)

    

5. Click Save to save the changes

    

6. Click Apply Policy

    

And test it.

 

Cheers,

 

Kees