For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mountazar_Abou_'s avatar
Mountazar_Abou_
Icon for Cirrus rankCirrus
Dec 16, 2017
Solved

xmlns="" is causing rejection on BIG-IP ASM

Dear sirs, we are facing a rejection by F5-ASM when the below SOAP XML request (received from the client side): http://schemas.xmlsoap.org/soap/envelope/"; xmlns:xsd="http://www.w3.org/2001/XMLS...
application delivery
ASM Advanced WAF
security
  • Mountazar_Abou_'s avatar
    Mountazar_Abou_
    Dec 17, 2017

    Dear sirs, I found the reason behind the rejection.

     

    It was simply because the element is not under namespace ";; and that is why it needs to have an attribute of [xmlns=""] in order to work correctly.

     

    Its parent element (sendOTP) had the attribute of "xmlns=";; thus affecting its child element namespace.

     

Mountazar_Abou_'s avatar
Mountazar_Abou_
Icon for Cirrus rankCirrus
Dec 17, 2017

Dear sirs, I found the reason behind the rejection.

 

It was simply because the element is not under namespace ";; and that is why it needs to have an attribute of [xmlns=""] in order to work correctly.

 

Its parent element (sendOTP) had the attribute of "xmlns=";; thus affecting its child element namespace.

 

Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Dec 17, 2017

Good spot - I recommend using an XML validation tool tool to check out problematic requests to ensure that they do validate correctly.