Forum Discussion
Aurel
Jun 26, 2019Cirrus
Unparsable request content - which security tradeoff ?
Hello all, I am facing a violation for URL length exceeding the default ASM (2048) value. Options to deal with this seems to be : increasing the whole system variable value of 2048 Disable ...
Feb 01, 2024
Hi Aurel and santoshmashetti ,
The best security tradeoff is to define this URI(s) in ASM Microservices and disable HTTP compliance check under this URI only.
Look at here for more details :
doing this narrow the attack service for your device and provide an optimal tradeoff for your policy.
But make sure this length is valid in the violation is a false positive.
Thanks
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects