For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cmcnicholas's avatar
cmcnicholas
Icon for Cirrus rankCirrus
Jan 19, 2024

UTF-8 character query

Hi, we had a request to apply a security filter would allow the first 8400 range of the UTF-8 charset on one of our ASM policies. Some characters were being blocked during customer testing. Other t...
application delivery
security
Joseph_Martin's avatar
Joseph_Martin
Icon for Employee rankEmployee
Jan 20, 2024

If the ASM policy has Automatic Learning enabled, then if enough traffic was seen from enough different sessions and IP addresses AND over a long enough period of time, then it is certainly possible that all of the characters were "learned" as valid values.

With that said, there are a number of other possible explanations for this, for which I would need more information to really nail down the exact cause.

Joe M