Forum Discussion

Andy101's avatar
Andy101
Icon for Nimbostratus rankNimbostratus
Jul 23, 2021

False Positive on AWS WAF F5 Managed Rule F5#OWASP_Managed#rule_div_tag__behavior__Parameter__AllQueryArguments_Body

Hello   I'm not sure if this is a question for AWS support or F5 but I'll start with F5support.   We recently enabled 2 sets of rules on a AWS WAFv2 from F5 (F5-CVE_Managed and F5-OWASP_Manag...
AWS
cloud
F5 Cloud Services
waf
gocker99's avatar
gocker99
Icon for Employee rankEmployee
Jul 26, 2021

Hi there!

 

Unlike traditional, full blown WAF security solutions, the content of F5 rules is not visible and cannot be viewed.

We have the rule. The next step is to Get better details of the http request that was blocked. Can you paste the HTTP request that was blocked? We need more details than the info above. We will confirm whether the rule blocked a true malicious request or not. If needed, we may then suggest on policy adjustments.