Forum Discussion

Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Nov 07, 2019

Legitimate Traffic is Blocked at ASM Policy

Certain good traffic is blocked at ASM Policy. From the event Log i see as HTTP protocol compliance failed , due to HTTP Validation tagged with " Null in request" .   HTTP POST shows %00 ( Bo...
application delivery
ASM Advanced WAF
BIG-IP
Null in Action
security
Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Nov 08, 2019

Can you explain little bit more on this

 

"If you find this more concerning than globally allowing null bytes, then disabling the "null in request" violation would be the way to go."

 

Subrun's avatar
Subrun
Icon for Cirrostratus rankCirrostratus
Nov 12, 2019

Thanks as of now for your reply. I am still trying to dig into it.

 

I am trying to understand refer to this K7931 and when we see "Null in Request" in our Event Log does this fall into below 2 criteria ?

 

Configuring the parameter with the NULL to use User-input value as the Parameter Value Type

Configuring the parameter with the NULL to use Ignore value as the Parameter Value Type