For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Nov 13, 2019

Would the AWAF parse JSON in a http responses?

Hi;   I know that the AWAF did not do it in version 12. I thought I would ask to see if the JSON data in HTTP responses can be parsed now.     Kindly Wasfi
ASM Advanced WAF
security
Greasy_Pretzel's avatar
Greasy_Pretzel
Ret. Employee
Dec 31, 2019

https://techdocs.f5.com/en-us/bigip-14-1-0/big-ip-asm-implementations-14-1-0/logging-application-security-events.html

About logging responses

If you enable response logging in the logging profile, the system can log only responses that include the following content headers:

  • "text/..."
  • "application/x-shockwave-flash"
  • "application/sgml"
  • "application/x-javascript"
  • "application/xml"
  • "application/x-asp"
  • "application/x-aspx"
  • "application/xhtml+xml"
  • "application/soap+xml"
  • "application/json"

The system cannot log other responses.

 

If your response have the "application/json" then system should log the response.

 

The manual for v12.1.x says the same.