For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Feb 03, 2023

Sudden change in ASM policy

I observed a  change within bigip settings. Sudden block on a violation called illegal host name/ reguest length and this violation is not marked as block from policy settings, but i can see it block...
application delivery
devops
security
THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Feb 05, 2023

Dear Amine,

both are blocked but the strange is this violation is not blocked from learning and blocking settings. Also, policy in transparent mode is blocked with this violation.

Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Feb 05, 2023

The blocking you described must absolutely not occur in transparent mode. I suspect the policy does not get applied correctly due to some reason, you can first check in /var/log/asm if you have errors after applying the policy. If everything seems OK after basic troubleshooting, better is to open a case with F5