Forum Discussion

Vladimir_Shishk's avatar
Vladimir_Shishk
Icon for Altocumulus rankAltocumulus
Jul 07, 2022
Solved

XML parsing by XML firewall

Good day. I have a financial application behind my F5 (i2800) and I need to search specific fields in XML body of requests/responses to/from this application and log theese pairs (one value from req...
application delivery
asm
security
xml
XML firewall
  • AubreyKingF5's avatar
    AubreyKingF5
    Jul 07, 2022

    You can DEFINITELY use ASM / AWAF to inspect XML. ASM has an option to upload a WSDL to build policy from when you're doing explicit XML firewalling. The only thing that a true-to-form XML Firewall does that ASM does not is XML transformation. This may have changed in more recent AWAF versions, unbeknownst to me.

AubreyKingF5's avatar
AubreyKingF5
Icon for Admin rankAdmin
Jul 07, 2022

You can DEFINITELY use ASM / AWAF to inspect XML. ASM has an option to upload a WSDL to build policy from when you're doing explicit XML firewalling. The only thing that a true-to-form XML Firewall does that ASM does not is XML transformation. This may have changed in more recent AWAF versions, unbeknownst to me.

  • Vladimir_Shishk's avatar
    Vladimir_Shishk
    Icon for Altocumulus rankAltocumulus
    Jul 10, 2022

    Thank you for your answer, Aubrey,

    Bu how can I send these parsed values to an external HSL server?

    Should I use an iRule for this?

Related Content