Forum Discussion
Emil_T
Cirrus
CirrusHTTP Profile troubleshoot
HTTP profile is enforcing RFC. How can I see logs of the exact violation and block? For example, if a RST sent due to RFC violation, I could activate BIG-IP system to log TCP RST packets (https://m...
Injeyan_Kostas
Nacreous
NacreousYes ASM enforces the same RFC rule for HTTP compliance.
But it does much more than this as it is a WAF. And actually on of the top ones.
So if you have ASM license of course you should use it not for just HTTP RFC compliance, but as an Enterprise WAF.
If you don't have an ASM license and your goal is just to enforce HTTP RFC compliance it does not worth the cost
Emil_TCirrus
CirrusThx for the reply. Let me rephrase my question thought. I have an ASM license. Would it be preferable to disable HTTP RFC enforcement at the HTTP profile level and leave the ASM engine handle it instead, so I can get more comprehensive logging details?
- Injeyan_Kostas
Yes you should let ASM do the job
