Forum Discussion

Chris_Paulraj_1's avatar
Chris_Paulraj_1
Icon for Nimbostratus rankNimbostratus
Jan 05, 2009

Need some help to understand the violations reported by ASM

Is there any documentation or website that would help to understand the HTTP violations better? When ASM reports "Multiple decoding" or "Modified Domain cookie", I am not able to explain exactly what needs to be fixed to the application developers. Though ASM provides the full request, it would be helpful if it gives out more information about the violation! I appreciate any input.

 

 

thanks

 

Chris Paulraj

 

 

app sec
BIG-IP Access Policy Manager (APM)
security
  • Ido_Breger_3805's avatar
    Ido_Breger_3805
    Historic F5 Account
    Jan 05, 2009
    Hi Chris,

     

    Your point is noted. We will provide such explanation within the GUI in the following ASM releases.

     

    In the meantime, Have you looked in the online help for the page that sets the blocking policy (policy->blocking-settings) or the manual?

     

     

    Cheers,

     

     

    Ido Breger

     

    Product Manager, Security.