Unblocking CSV uploads

Question

Hello,We currently have a server that needs to upload CSV files. If the CSV is well formatted, the users want to be able to export anything from Excel and not get blocked. E.g. headers with ":", text like "sleep", etc.On top of that, they sometimes have long file names, and big files (10 GB).&nbsp;Do you have any advice to which rules put in place for this scenario? We don't want to create security risks, but in any case the CSV is being stored as text in an Elastic Search database.&nbsp;Thank you in advance,Artur

zamroni777 · Answer

the developers can implement compression via javascript etc., especially as the the file size is big.compression will also make those texts to non printable characters that wont trigger sql injection or xss false positive.
https://developer.mozilla.org/en-US/docs/Web/API/Compression_Streams_API#browser_compatibility
anyway, for such big file size, uploading to file server then app server reads from it seems more reliable.
&nbsp;

aswin_mk · Answer

Hi,
&nbsp;
In F5 Side we have to make changes in LTM to allow the big files and ASM to verify the csv file and disable the attack signature (. E.g. headers with ":", text like "sleep", etc.).&nbsp;

Forum Discussion

SSO Login Update Coming to DevCentral

Kevin - June 2026 Featured F5er

Tyler - May 2026 Featured Member

Recent Discussions

ASM attack signatures not syncing between active and standby F5

Hardware BIG-IP appliance reach EOSS, but the software version running on it not yet?

VPN Communication Error with F5 BIG-IP Edge Client

simultaneous disabling / enabling of all LTM objects

Query on source IP preservation for syslog traffic through F5 virtual server

Related Content

CSV to Address External Datagroup File

File Uploads and ASM

Export Virtual Server Configuration in CSV - tmsh cli script

Export GTM/DNS Configuration in CSV - tmsh cli script

Layered Virtual Server iRule Solution for ICAP File Upload Scanning on BIG-IP