For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

draco_184361's avatar
draco_184361
Icon for Nimbostratus rankNimbostratus
Jan 22, 2018

post body data parameters-f5 asm

Hi   was deploying f5 asm for oracle erp application.In one of the url, i see below :-   /OA_HTML/RF.jsp ->   POST /OA_HTML/RF.jsp?function_id=ATTACHREST&security_group_id=0&isReadOnlyCusto...
application delivery
ASM Advanced WAF
BIG-IP
security
draco's avatar
draco
Icon for Nimbostratus rankNimbostratus
Jan 22, 2018

Yea i know its not in blocking..havent put it yet..need to finetune.. Am getting a lot of false positives with regard to this...am not sure of doing an exception.globally...wanted to know if there is a way to do for this particular url entry..wanted to know if f5 detecting the entire post body data as a parameter is correct or not..if not..how do i rectify it and make f5 look into the params field resplist and homepage ?