For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

basemsousan1985's avatar
basemsousan1985
Icon for Nimbostratus rankNimbostratus
Dec 26, 2016

not RFC 2616 compliant Header request issue

Hi Guys, I need help regarding this Confusing issue. I have a case where an application receives a JSON request, generating false positive violation, we've learned it, but ASM is still blocking the ...
ASM Advanced WAF
BIG-IP
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Apr 02, 2017

It is quite difficult to troubleshoot with sol little detail. What is the the actual violation raised and being blocked?? what is the SP and HT you are talking about? From what you are describing it appearsthat the fault is with the application which fails to insert a required line break (CRLF) between the User-Agent and Content-Type header? The you should talk to application developers (if they are available) to get them to fix this