'F5 rules for AWS WAF' ruleset not working for jsp web shell attack

Forums Technical Forums
, ,
1

I have subscribed to ‘F5 rules for AWS WAF’ Common Vulnerabilities & Exposures (CVE) Rules in AWS market place and protected the ALB’s. Even after enabled, I see my web server got affected by jsp web shell attack and found war file deployed by unauthorized user.

Can you please let me know what are the rules available to protect from jsp web shell attack?

2

Hi ajayp,

The content of F5 rules is not visible and cannot be viewed.

REF: https://my.f5.com/manage/s/article/K21015971

You can also check @buulam 's answer.

Link: F5 Rules for AWS WAF - List of CVE | DevCentral

3

@ajayp - if this was solved for you please consider marking @Enes_Afsin_Al answers as Solution.