Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

kieronS's avatar
kieronS
Icon for Nimbostratus rankNimbostratus
4 years ago

What is the rule_SSRF_attempt_AllQueryArguments_Body actually checking for

My project have implemented the F5 managed AWS WAF ruleset OWASP_Managed and we've noticed that the WAF is blocking the following rule :   rule_SSRF_attempt_AllQueryArguments_Body   I need to...
F5 Rules for AWS WAF
security
Mohamedfaizur's avatar
Mohamedfaizur
Icon for Employee rankEmployee
4 years ago

Hi,

Unlike traditional, full blown WAF security solutions, the content of F5 rules is not visible and cannot be viewed. Please send us the HTTP request that was blocked . We will confirm whether the rule blocked a true malicious request or not.

Thanks