For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Arthur_7109's avatar
Arthur_7109
Icon for Nimbostratus rankNimbostratus
15 years ago

The BIG-IP ASM attack signature engine has a limited maximum recursion depth

Hi guys,     According to sol12250   "   This behavior limits the amount of resources that can be dedicated to any one evaluation operation. Certain combinations of attack signatures and r...
app sec
BIG-IP Access Policy Manager (APM)
security
brad_11480's avatar
brad_11480
Icon for Nimbostratus rankNimbostratus
15 years ago
so wondering if 10.2.1HF3 (10.2.1 build 511.0) could be missing this fix. we are running into a lot of these when we enabled SQL injection signatures and finding that the requests aren't very complicated at all.

 

 

hate to have to turn off signatures just to make this work. defeats the purpose and the reason of having the ASM.