Forum Discussion

Lyonsy_271608's avatar
Lyonsy_271608
Icon for Altocumulus rankAltocumulus
Nov 23, 2016

WAF Blocking templates on upload

Hi Guys   Have an issue with templates (html and css) being uploaded to a certain url detects them and blocks as Cross Site Scripting (XSS), Detection Evasion, Other Application Attacks, SQL-Inj...
BIG-IP
iRules
security
  • Lyonsy_271608's avatar
    Lyonsy_271608
    Nov 25, 2016

    when HTTP_CLASS_SELECTED { ASM::enable if { [HTTP::uri] starts_with "/*****" } { ASM::disable } }

     

ErkkiS_295148's avatar
ErkkiS_295148
Icon for Cirrus rankCirrus
Nov 23, 2016

If this comes from a trusted developer IP the easiest way would probably be whitelisting him: Security ›› Application Security : IP Addresses : IP Address Exceptions ›› New IP Address Exception...

 

IP Address Exception Properties IP Addressdeveloper_source_ip Netmask255.255.255.255 Policy Builder trusted IP Disabled Ignore in Anomaly Detection Enabled Ignore in Learning Suggestions Enabled Never block this IP Address Enabled Never log traffic from this IP Address Enabled