F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Apr 26, 2016

HTTP Protocol Compliance Failed: Header name with no header value

Hi,   I am getting the following blocked request:   Header 'User-ID' has no value. POST /abcd/api/checkActivatedWatch HTTP/1.1 Host: new.temporary.com Content-Type: application/json Accept: / C...
ASM Advanced WAF
BIG-IP
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Apr 26, 2016

Hello,

 

Unfortunately, you can do it only using an irule . The HTTP Headers section can't help as you can just disable Evasion Techniques from checking

 

You can use an irule to override the blocking action : https://devcentral.f5.com/wiki/iRules.ASM__unblock.ashx

 

or sanitize the UserID header when it's blank