For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SimonS_84965's avatar
SimonS_84965
Icon for Nimbostratus rankNimbostratus
Oct 21, 2014

How to exclude ASM signatures with "Attack Type: Command Execution"

We have recently installed ASM (its great fun) and are currently baselining a dozen or so web apps, using the policy learning feature (with wildcards on most things) we have managed to find a healthy...
ASM Advanced WAF
security
SimonS_84965's avatar
SimonS_84965
Icon for Nimbostratus rankNimbostratus
Oct 23, 2014
Ive been advised that this isnt really possible (i did mention it would make a nice feature) , the suggestion from F5 was that this is better handled per/paramter .. which dosent help if you (as i am) running wildcard(*) .. im going to try a redesign to see if i can achieve the same requirements via a different approach.