For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    May 18, 2018

    Hi Gigo,

     

    you don't have ASM module? because you can use an ASM security Policy to filter using a WSDL schema... The security policy can verify XML format, and validate XML document integrity against a WSDL or XSD file. The security policy can also handle encryption and decryption for web services.

     

    https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-getting-started-12-1-0/6.html

     

    APM is not able to filter XML format.

     

    The only possibility that I see and do it with an Irule... but I confess that it's not the best way.

     

    Let me now if you need additional help.

     

    Regards