Forum Discussion

Mohammad_62878's avatar
Mohammad_62878
Icon for Nimbostratus rankNimbostratus
May 24, 2015

Why ASM counts the parameter length incorrectly

Good morning,

 

I have an ASM policy with Unicode (utf-8) as application language. I noticed that ASM multiplys the Arabic characters in the parameters by two. That means if I have a word of 7 Arabic characters It counted 14. This triggers the alarm as the max length of the parameter is 10.

 

I have BIG-IP v11.6.0 Build 4.111.420 Engineering Hotfix HF4. Could it be a bug in this version? Or is just a mistake I did?

 

arabic
ASM Advanced WAF
management
security
utf-8
  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    May 26, 2015

    Hello Mohammad, I think ASM is working as designed here. One workaround would be to increase the max length of the offending parameter to 14--assuming you want to keep using utf-8. However, it might be worth a try to re-configure the policy using Arabic (iso-8859-6) or Arabic (windows-1256).