For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lyonsy_271608's avatar
Lyonsy_271608
Icon for Altocumulus rankAltocumulus
Nov 23, 2016
Solved

WAF Blocking templates on upload

Hi Guys   Have an issue with templates (html and css) being uploaded to a certain url detects them and blocks as Cross Site Scripting (XSS), Detection Evasion, Other Application Attacks, SQL-Inj...
BIG-IP
iRules
security
  • Lyonsy_271608's avatar
    Lyonsy_271608
    Nov 25, 2016

    when HTTP_CLASS_SELECTED { ASM::enable if { [HTTP::uri] starts_with "/*****" } { ASM::disable } }

     

boneyard's avatar
boneyard
Icon for MVP rankMVP
Nov 24, 2016

depending on the attack signature type you might be able to disable it on a parameter.

 

if you can't you need to do something with different ASM policies. you can't disable based on URI for attack signatures easily shamefully.