For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

newf5learner's avatar
newf5learner
Icon for Nimbostratus rankNimbostratus
Sep 16, 2020

irule to mitigate HTTP de-sync attack

Hi Experts, I'm here to seek some help in implementing irule that would search the http requests that contains both the headers 1. Transfer Encoding 2. Content-length and reset the connection for...
ASM Advanced WAF
iRules
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Sep 28, 2020

Hello,

 

Why you can not use standard "HTTP Desync Attack Attempt" attack signature for it?

 

Thanks, Ivan