For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jérôme_JUSSY_14's avatar
Jérôme_JUSSY_14
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

XML-PROFIL SOAP-ENV:mustUnderstand in Header blocking by F5

Hi, One of our client uses this option, SOAP-ENV:mustUnderstand="1", in the header of their WS requests. This request is blocked by the F5: violation : "XML data does not comply with schema or WSDL document" Details : XML Buffer --> SOAP-ENV:mustUnderstand Description --> Malformed document - schema validation failed Attribute is not defined in schema Context --> URL

 

I just have disabled "Validate SOAPAction Header" in the XML-PROFIL and it doesn't work.

 

Do you have a solution to solve this problem ?

 

ASM Advanced WAF
security

1 Reply

  • JRahm's avatar
    JRahm
    Icon for Admin rankAdmin
    Mar 26, 2014
    under Security->Application Security->Blocking->Settings, if XML data does not comply with schema or WSDL document is checked for block, then you will either need to uncheck this, or modify the header content before ASM evaluates (or remove and re-add after ASM processing is complete.)