uri hiding/encrypting

Hi Mike,

if disabling of directory traversal attack signatures is not an option for you, then you may try to remove the directory traversal before passing the request to ASM and simply restore it right after.

when HTTP_REQUEST { 
    if { [HTTP::uri] contains ".." } then {
        set dir_traversal [HTTP::uri]
        HTTP::uri [string map { ".." "traversal" } [HTTP::uri]]
    }
}
when HTTP_REQUEST_SEND {
    if { [info exists dir_traversal] } then {
        clientside {
            HTTP::uri $dir_traversal
        } 
    }
}

Cheers, Kai

we don't have asm we are using different vendor applicable for the same