F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Dec 06, 2014

<?xml tag detected as a violation by ASM.

Hello Folks,

 

Just to validate the fact, does it mean that when we see

 

Can anyone please help me confirming this? If that is the case, shall I use XML Policy with ASM to optimize the result of such detection? In case if Application doesn't have XML content and if I apply XML policy, what would be the outcome?

 

Cheers mates! Darshan

 

ASM Advanced WAF
security
xml

1 Reply

  • R_Marc's avatar
    R_Marc
    Icon for Nimbostratus rankNimbostratus
    Dec 07, 2014

     

    If the application, in general, is a normal Web UI app, but has some parameters that utilize XML, I wouldn't use an XML policy for the overall app, personally. I would just allow XML to that particular URI and parameter. Another method would be to apply an ASM XML policy to the URI via an iRule, if it's for a lot of separate parameters.