For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Scott_R's avatar
Scott_R
Icon for Nimbostratus rankNimbostratus
Mar 16, 2009

Proxy server behind ASM

I have an apache proxy server behind the ASM in transparent mode. It's returning request violations for every image since it thinks the image should be on the proxy server rather than the server it's...
app sec
BIG-IP Access Policy Manager (APM)
security
Scott_R's avatar
Scott_R
Icon for Nimbostratus rankNimbostratus
Mar 16, 2009
Full request posted below. The gif is on the server it's proxying to. Not on the proxy server. The flow is client -> ASM -> proxy server. Was attempting to protect the proxy server.

 

 

Thanks.

 

 

Flags Requested Object Response Code Internal Use

 

[HTTPS] /images/images/view-attachments.gif 304 Yes

 

 

Full Request

 

GET /images/images/view-attachments.gif HTTP/1.1

 

Accept: */*

 

Referer: https://proxyserver.mydomain.com/homepage/homepage.jsp

 

Accept-Language: en-us

 

UA-CPU: x86

 

Accept-Encoding: gzip, deflate

 

If-Modified-Since: Mon, 31 Jan 2000 19:34:12 GMT

 

User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; GTB5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.2; .NET CLR 1.1.4322)

 

Host: proxyserver.mydomain.com

 

Connection: Keep-Alive

 

Cookie: TSb074f7=67bcdaf929e6111babadd04136b0feba160b99a96fbee49749be4837c8f0c0030d53b05734d55be3ffabebb2; jsessionid=384121237208175220; userInfo=userID%3D17c