Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

User is being blocked on F5 with because the email adress starts with "parent.

krisnaseechurn
Altostratus
Altostratus

our f5 waf attach signatures is treating email addresses as risk and blocking the traffic. email address for people with surname 'parent' is not allowed. do we have a solution on how to allow this traffic without compromising attack signatures

1 REPLY 1

Yoann_Le_Corvi1
Cumulonimbus
Cumulonimbus

Hi

We would need more info, and possibly the request payload triggering the event. But my feeling is that you should be able do diasable that specific signature on the specific parameter where the email address is used. That way, you do not completely disable the signature for the whole policy.

But if you provide the detailed payload causing the issue, I will be able to be more specific.

Yoann