Forum Discussion

Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Nov 07, 2019

Legitimate Traffic is Blocked at ASM Policy

Certain good traffic is blocked at ASM Policy. From the event Log i see as HTTP protocol compliance failed , due to HTTP Validation tagged with " Null in request" .   HTTP POST shows %00 ( Bo...
application delivery
ASM Advanced WAF
BIG-IP
Null in Action
security
Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Nov 08, 2019

I see that for "File Upload" Option there is no Attack Signature Option I can select. Images attached.

 

 

gersbah's avatar
gersbah
Icon for Cirrostratus rankCirrostratus
Nov 08, 2019

This is a feature of version 14 and later. See https://support.f5.com/csp/article/K79544554

"Note: Prior to BIG-IP ASM 14.0.0, you can configure attack signatures for parameters of Alpha-Numeric data type. Starting in BIG-IP ASM 14.0.0, you can configure attack signatures for parameters of File Upload data type, in addition to parameters of Alpha-Numeric data type."