For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sandy16's avatar
sandy16
Icon for Altostratus rankAltostratus
Jul 14, 2015

Way to increase the HTTP unparsable request length in ASM policy

Hi, in our ASM policy we are getting the HTTP Protocol Compliance failed > unparsable request length violation. In the event logs it states that the URL length has exceeded the maximum limit of 2048. Is there a way to increase this limit in the ASM instead of accepting(disabling) this violation?

 

ASM Advanced WAF
security

5 Replies

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jul 14, 2015
    are you sure it is unparsable request length violation? because that seems a combination of Unparsable request content and request length.
  • sandy16's avatar
    sandy16
    Icon for Altostratus rankAltostratus
    Jul 14, 2015

    Yes, it is the unparsable request content violation only. (attached)

     

  • Anthony_Epron's avatar
    Anthony_Epron
    Icon for Nimbostratus rankNimbostratus
    Mar 21, 2016

    Hello,

     

    Someone have solution for this problem ? I want modify the maximum URL length of the Unparsable request content blocking option.

     

    Thanks,

     

  • matbel_119218's avatar
    matbel_119218
    Icon for Nimbostratus rankNimbostratus
    Apr 06, 2016

    Hi!

     

    You can modify in this menu: Security ›› Options : Application Security : Advanced Configuration : System Variables : ecard_max_http_req_uri_len

     

    And you must restart ASM service: tmsh restart sys service asm

     

    Regards

     

    • Charles_Rosenbe's avatar
      Charles_Rosenbe
      Historic F5 Account
      Apr 26, 2016
      For more information on this, see https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-3-0/asm_apx_internal_params.html