F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

kepler's avatar
kepler
Icon for Nimbostratus rankNimbostratus
Aug 29, 2023

Help with investigating the cause for blocked request

Hi, We are subscribed to F5 Rules for AWS WAF - Web exploits OWASP Rules via AWS Marketplace and use it for our WAF config. We see some requests are getting blocked and see which rule triggers it. ...
F5 Rules for AWS WAF
security
Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Aug 31, 2023

The ruleid _XSS_script_tag__Parameter__AllQueryArguments_Body suggests a XSS script tag detected (> or < signs), could you check your request payload and confirm that?

kepler's avatar
kepler
Icon for Nimbostratus rankNimbostratus
Sep 04, 2023

Hi Amine_Kadimi ,

Thanks for reply.

Yes the body of the request has "<>" because it's an xml.

What's the best way to exclude it and do you have any documentation on what exactly is checked by your rules?

Thanks!