For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Scott_R's avatar
Scott_R
Icon for Nimbostratus rankNimbostratus
Mar 16, 2009

Proxy server behind ASM

I have an apache proxy server behind the ASM in transparent mode. It's returning request violations for every image since it thinks the image should be on the proxy server rather than the server it's...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 16, 2009
Maybe I'm missing something, but I don't see why this would generate false positive violations. What violations are being generated? If it is only 'non-existent object' do you have a wildcard object defined in the policy?

 

 

Also, why is the host header in the request set to the proxy server? Shouldn't this be the destination server's domain name?

 

 

Aaron