For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Jul 26, 2017

illegal meta character in header

I am getting a violation as illegal meta character in header ! is coming in cookie value.   Cookie: ............ mycookie !   Please suggest as we cann't make the "illegal meta character in hea...
ASM Advanced WAF
BIG-IP
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Jul 26, 2017

Hello MSZ,

 

You will need to allow characters that triggered in your violation if you want to accept them. To do that :

 

1) Go to "Security ›› Application Security : Headers : Character Set"

 

2) Change the State for characters that matched

 

3) Apply your policy

 

4) Test again

 

Regards