For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
May 09, 2011

Requested URL Showing up a n/a

I am seeing a violation in ASM for an Illegal URL Length, however when I look at the request the Requested URL just shows [https]. So there is no URL or file type to check length. Has anyone seen this and if so what is the file type I should be looking at in policy?

 

 

app sec
BIG-IP Access Policy Manager (APM)
security

3 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 09, 2011
    Hi Mike,

     

     

    So if you look at the full request info, is it blank?

     

     

    Aaron
  • Mike_Maher's avatar
    Mike_Maher
    Icon for Nimbostratus rankNimbostratus
    May 10, 2011
    No there is data in the full request, it is a POST and the URL is there. I have tried putting the file type that is listed there in staging to see if it will pass but no luck. I have also tried that same thing with no_ext and no luck there either.

     

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    May 10, 2011
    Can you reply with an anonymized copy of the full request info?

     

     

    Thanks, Aaron