For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Techgeeeg_28888's avatar
Techgeeeg_28888
Icon for Nimbostratus rankNimbostratus
Aug 03, 2015

Limiting selected fileupload based on extension using ASM

Hi Guys,   I just need some quick help from experts, I have ASM working for the web app's. The web app should allow's selected type of file upload, I need to control this from ASM. Do I have to de...
ASM Advanced WAF
deployment
security
TMOS
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Aug 03, 2015

Hi,

 

the only integrated way we have so far is to define the upload parameter and select Disallow File Upload of Executables.

 

You could also use regex to filter file upload name if it's passed as a parameter like explained in this thread :

 

https://devcentral.f5.com/questions/file-upload-restriction-on-asm

 

If you need something more granular you will have to implement an irule.