Forum Discussion

dge_netsupport's avatar
dge_netsupport
Icon for Nimbostratus rankNimbostratus
Jan 07, 2026

OWA File Upload URIs for WAF Bypass

Hi All,   We are using the OWA 2016 WAF application template (negative security model) and would like to know:   The list of OWA URIs used for file uploads The recommended URIs to bypass or rela...
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jan 09, 2026

This sounds like a project work for the Professional services to be honest.

 

See 

New BIG-IP ASM v13 Outlook Web Access (OWA) 2016 Ready Template | DevCentral as you can enable the learning and AWAF should learn the file upload urls after you accepted them or ask the OWA app team to give you a list of the URLS for file uploads and add it manually as this is web application specific domain knowledge . 

 

For ICAP my article can be helpful :

https://community.f5.com/kb/communityarticles/f5-icap-over-ssltls-secure-icap-with-f5-asmawaf-antivirus-protection-feature/318002