Forum Discussion

Alain_B_150222's avatar
Alain_B_150222
Icon for Nimbostratus rankNimbostratus
Sep 24, 2014

How to configure ASM for an application using REST?

Hi,   I tried to use the automatic ASM policy building feature, but realized this will generated a huge amount of URLs to add as the application uses REST. I found nothing helpful in the docs. URL...
ASM Advanced WAF
security
Alain_B_150222's avatar
Alain_B_150222
Icon for Nimbostratus rankNimbostratus
Sep 24, 2014

Thanks for your quick reply.

 

Indeed, the collapse option is interesting, I did not notice it so far (noob ;). From a quick test I did, it seems not to work however. I reduced the occurences number to 10 (default of 500 is quite high) and browsed the application to learn brand new URLs, I have now several new REST URLs appearing 60x or more often, but they only differ by the number the URLs end with. I'll investigate on that part.

 

The number part of the REST URLs is an ID so I would consider it being an unnamed parameter in the URL. But maybe I should just trust the application to handle it correctly. Regex side I only thought about something quite simple like [0-9]+ to look for numbers.