For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SRM's avatar
SRM
Icon for Altocumulus rankAltocumulus
Nov 26, 2025

Illegal Request in Learning Suggestion for 200 OK response

Dears, I want to know the reason why this suggestion is showing an illegal request status even though response code is 200 OK. Is it because multiple violations triggered? The policy is in transp...
announcement
application delivery
management
security
Aswin_mk's avatar
Aswin_mk
Icon for MVP rankMVP
Dec 01, 2025

Hi,

 

Yes — a request can show Illegal even though the backend returned 200 OK because the WAF detected one or more violations, and Response Code has no influence on the violation status.

The “Illegal” flag is based only on WAF policy evaluation, not on the application’s response.

 BR
Aswin