For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chungyu_16122's avatar
chungyu_16122
Icon for Altostratus rankAltostratus
Mar 08, 2018

Managing ASM events - false positivies

what happens to Attack signatures that are disabled on the * parameter? Does this mean the signature is disabled on all?

 

I have several Attack signatures for SQL injection type of attacks in my DEV environment so I disable them on the parameter wildcard. I am assuming, they still apply to specific URL parameters.

 

Thanks

 

ASM Advanced WAF
security

1 Reply

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Mar 08, 2018

    If you have explicit parameters in your policy they take precedence over the wildcard parameter. So you can have disabled signatures on the wildcard but they can still be enabled for a explicit parameter.