For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jérôme_JUSSY_14's avatar
Jérôme_JUSSY_14
Icon for Nimbostratus rankNimbostratus
Mar 25, 2014

XML-PROFIL SOAP-ENV:mustUnderstand in Header blocking by F5

Hi, One of our client uses this option, SOAP-ENV:mustUnderstand="1", in the header of their WS requests. This request is blocked by the F5: violation : "XML data does not comply with schema or WSDL d...
ASM Advanced WAF
security
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Mar 26, 2014
under Security->Application Security->Blocking->Settings, if XML data does not comply with schema or WSDL document is checked for block, then you will either need to uncheck this, or modify the header content before ASM evaluates (or remove and re-add after ASM processing is complete.)