Forum Discussion
mamat_132868
Nimbostratus
Nimbostratushow to block hidden field manipulation
when I try to view from traffic learning, I m still able to change the value of a variable using fiddler. this is for ASM deployment. please advise
4 Replies
Cory_50405Noctilucent
I'm not sure I understand your question. Are you asking about how to prevent insertion of certain HTTP headers?
mamat_132868i already configure all the signature attack. but unforunately i still able to change the information of the items. Eg: A bag cost 50usd. i used fiddler to change the amount to 10usd. it still can bypass the ASM firewall
- Cory_50405Is your policy in blocking mode? How did you build your policy?
- mamat_132868
yeah already. I build policy using Rapid Development Policy. what the difference between normal policy and rapid development?
