Forum Discussion

sandy16's avatar
sandy16
Icon for Altostratus rankAltostratus
Apr 21, 2015

question on json profile in ASM

Hi folks, we have configured a json profile and applied to a bunch of URLs that have been provided to us from the application team. My question here is - what if they missed any of the URLs that use Json? What happens in that case if the policy is in transparent OR blocking mode?

 

ASM Advanced WAF
security

2 Replies

  • PeteWhite's avatar
    PeteWhite
    Icon for Employee rankEmployee
    Apr 24, 2015

    You can allocate a JSON profile to the wildcard URL (*) and use the Content-Type header accordingly.

     

  • Mike_Maher's avatar
    Mike_Maher
    Icon for Nimbostratus rankNimbostratus
    Feb 01, 2016

    To answer the question of what will happen. If you have a URL that is passing data in JSON format and do not have a profile applied, you will get blocks for like Illegal Parameters. However when you look at them you will see that in fact it is not a parameter but rather JSON formatted data that is not being parsed correctly because there is no profile attached.