For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ghislain_Pellet's avatar
Ghislain_Pellet
Icon for Nimbostratus rankNimbostratus
Jan 11, 2017

How to define file types as case insensitive?

Allowed file types are case sensitive.   How can they be defined as case insensitive?  
ASM Advanced WAF
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 12, 2017

Hi Ghislain,

during security policy creation, you can configure the rule matchings with an "case-insensitive" option. But once the policy is created you can't change this setting without loosing the already established ruleset (aka. reconfigure the entire policy).

If your existing ruleset is to complex, then you may use some RegEx pattern to allow file-types and URLs regardless of the requested CASE. E.g. use the wildcard pattern 

[Hh][Tt][Mm][Ll]
instead of explizit 
HTML
or 
html

For addtional information on the wildcard syntax check out: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/28.html

Cheers, Kai