For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MSZ's avatar
MSZ
Icon for Nimbostratus rankNimbostratus
Sep 26, 2017

[WSS ] illegal URL

Hi I am getting the following msg (Blocked) in event logs [WSS] illegal URL ANy idea abou it. Using version 13.x  
ASM Advanced WAF
BIG-IP
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Sep 26, 2017

ASA MSZ,

It seems that your application use Websocket.

  • WS (for unencrypted text)*
  • WSS (for encrypted text)

As for HTTP/ HTTPs URLs, you will need to specify within your ASM policy "Allowed Websocket URLs"

You can define allowed URL either using "wildcard" from :

Security  ››  Application Security : URLs : Wildcards Order : WebSocket URLs

Or explicitly from :

Security  ››  Application Security : URLs : Allowed URLs : Allowed WebSocket URLs

Hope it helps

Waiting for your feedback