F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

小白's avatar
小白
Icon for Cirrus rankCirrus
Mar 02, 2022

crsf Incorrect interception

After I have configured crsf protection and my attack is intercepted, why will my normal operation be intercepted, and the normal access of other devices under the same LAN is also intercepted. I thi...
crsf
security
SamCo's avatar
SamCo
Icon for Cirrus rankCirrus
Mar 07, 2022

Ok, I realize i did not understand you were speaking about client sharing the same subnet, not servers.

From my understanding, the CSRF blocking you configured is matching normal application trafic. It's hard to explain why without more detail on your configuration and application.

Cheers,

Sam

小白's avatar
小白
Icon for Cirrus rankCirrus
Mar 08, 2022

This my policy's setting

 

 

  • SamCo's avatar
    SamCo
    Icon for Cirrus rankCirrus
    Mar 08, 2022

    10 seconds as expiration time is too short for a human i think, set at least 5 minutes if there is a form to fill,

    Cheers

    Sam

    • 小白's avatar
      小白
      Icon for Cirrus rankCirrus
      Mar 08, 2022

      不是因为时间。我试过了。即使我给 500 秒，它仍然会拦截正常的请求