# \#xml

**URL:** https://community.f5.com/tag/xml/279.md

[Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md)

---

## [F5 ASM XML processing - policy name.](https://community.f5.com/t/f5-asm-xml-processing-policy-name/76344)

<div class="topic-metadata">

**Author:** [@Asura2003](https://community.f5.com/u/Asura2003)\
**Replies:** 5\
**Last updated:** [July 16, 2025, 2:10pm UTC](https://community.f5.com/t/f5-asm-xml-processing-policy-name/76344 "2025-07-16T14:10:24Z")

</div>

Hello, we have an error message in logs: ASM out of memory error: event code X89 Exceeded maximum memory assigned for XML processing we have already increased both variables total\_xml\_memory and additional\_xml\_memor…

---

## [libxml2 and CVE-2024-25062](https://community.f5.com/t/libxml2-and-cve-2024-25062/76094)

<div class="topic-metadata">

**Author:** [@wgranada](https://community.f5.com/u/wgranada)\
**Replies:** 1\
**Last updated:** [May 13, 2025, 12:10pm UTC](https://community.f5.com/t/libxml2-and-cve-2024-25062/76094 "2025-05-13T12:10:29Z")

</div>

Good day All, Apologies for the silly question but I am new to F5, when I was running iHealth on my BigIP running V17.1.2.1 it flagged the above CVE-2024-25062. Is this for the version 17.1.0 - 17.1.2 which includes …

---

## [LTM VS padding payload response with whitespaces and asterisk](https://community.f5.com/t/ltm-vs-padding-payload-response-with-whitespaces-and-asterisk/75939)

<div class="topic-metadata">

**Author:** [@PidduckM](https://community.f5.com/u/PidduckM)\
**Replies:** 2\
**Last updated:** [March 31, 2025, 2:35pm UTC](https://community.f5.com/t/ltm-vs-padding-payload-response-with-whitespaces-and-asterisk/75939 "2025-03-31T14:35:04Z")

</div>

I have an application that talks to an old OpenVMS system, which was problematic in permanently closing TCP connections. To resolve this issue, I have put a BIG-IP Virtual Server in between them, so the message flow is n…

---

## [Perl Ltm Config To Xml/Excel (version 3.1)](https://community.f5.com/t/perl-ltm-config-to-xml-excel-version-3-1/69036)

<div class="topic-metadata">

**Author:** [@Miguel\_Rosa](https://community.f5.com/u/Miguel_Rosa)\
**Replies:** 3\
**Last updated:** [December 23, 2022, 3:56am UTC](https://community.f5.com/t/perl-ltm-config-to-xml-excel-version-3-1/69036 "2022-12-23T03:56:21Z")

</div>

Problem this snippet solves: This code is an improvement of “Perl Ltm Config To Xml (version 2)” published on previous DevCentral (https://devcentral.f5.com/s/articles/perl-ltm-config-to-xml-version-2-1009) queries the …

---

## [No matches under XML\_CONTENT\_BASED\_ROUTING](https://community.f5.com/t/no-matches-under-xml-content-based-routing/71157)

<div class="topic-metadata">

**Author:** [@Vladimir\_Akhmarov](https://community.f5.com/u/Vladimir_Akhmarov)\
**Replies:** 21\
**Last updated:** [December 10, 2022, 10:47am UTC](https://community.f5.com/t/no-matches-under-xml-content-based-routing/71157 "2022-12-10T10:47:00Z")

</div>

Hello! I have a requirement to match and log selected XML content under APM enabled VS I tried to follow https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-manager-implementations/routing-based-on-xml-co…

---

## [Malformed XML data](https://community.f5.com/t/malformed-xml-data/70739)

<div class="topic-metadata">

**Author:** [@SCRN](https://community.f5.com/u/SCRN)\
**Replies:** 1\
**Last updated:** [October 17, 2022, 5:56pm UTC](https://community.f5.com/t/malformed-xml-data/70739 "2022-10-17T17:56:12Z")

</div>

Hi all, have xml request like below ASM was detect this request as XML parser attack (Malformed XML data). In policy XML profile is Default When delete all \<value\> and \<field\>, request is ok BI It’s by desing w…

---

## [BigIP ASM Problems with FileUploads with SOAP](https://community.f5.com/t/bigip-asm-problems-with-fileuploads-with-soap/70460)

<div class="topic-metadata">

**Author:** [@P\_Kueppers](https://community.f5.com/u/P_Kueppers)\
**Replies:** 14\
**Last updated:** [September 30, 2022, 8:11pm UTC](https://community.f5.com/t/bigip-asm-problems-with-fileuploads-with-soap/70460 "2022-09-30T20:11:15Z")

</div>

Hi there, actually my ASM Policy is blocking a file upload for one application with the error message: HTTP protocol compliance failed Chunks number exceeds request chunks limit: 1000 I raised the chunks limit bli…

---

## [XML parsing by XML firewall](https://community.f5.com/t/xml-parsing-by-xml-firewall/70081)

<div class="topic-metadata">

**Author:** [@Vladimir\_Shishk](https://community.f5.com/u/Vladimir_Shishk)\
**Replies:** 2\
**Last updated:** [July 10, 2022, 4:50am UTC](https://community.f5.com/t/xml-parsing-by-xml-firewall/70081 "2022-07-10T04:50:10Z")

</div>

Good day. I have a financial application behind my F5 (i2800) and I need to search specific fields in XML body of requests/responses to/from this application and log theese pairs (one value from request, another - from …

---

## [HTTP Post SOAP XML monitor with data](https://community.f5.com/t/http-post-soap-xml-monitor-with-data/46454)

<div class="topic-metadata">

**Author:** [@Adriano\_Bezerr1](https://community.f5.com/u/Adriano_Bezerr1)\
**Replies:** 2\
**Last updated:** [February 16, 2020, 2:22pm UTC](https://community.f5.com/t/http-post-soap-xml-monitor-with-data/46454 "2020-02-16T14:22:21Z")

</div>

I need to set up an HTTP POST monitor that makes a call via SOAP XML, sends some data and I will handle the result, doing the test with CURL works 100%, however, when I configure the HTTP monitor or test using “echo -ne”…

---

## [XML Logging](https://community.f5.com/t/xml-logging/44244)

<div class="topic-metadata">

**Author:** [@Angelo](https://community.f5.com/u/Angelo)\
**Replies:** 1\
**Last updated:** [October 29, 2019, 5:31pm UTC](https://community.f5.com/t/xml-logging/44244 "2019-10-29T17:31:27Z")

</div>

Hi I need an I-rule to log XML content the issue is that i’m getting malformed errors from the code through the F5 but when we go directly we not getting the issue…

---

## [Perl Ltm Config To Xml (version 2)](https://community.f5.com/t/perl-ltm-config-to-xml-version-2/64811)

<div class="topic-metadata">

**Author:** [@Miguel\_Rosa\_614](https://community.f5.com/u/Miguel_Rosa_614)\
**Replies:** 5\
**Last updated:** [October 14, 2019, 4:09pm UTC](https://community.f5.com/t/perl-ltm-config-to-xml-version-2/64811 "2019-10-14T16:09:47Z")

</div>

Problem this snippet solves: This example is based on “Perl Ltm Config To Xml” by Joe Pruitt: queries the components of a virtual servers configuration and prints it out in an XML format for further processing. Now with…

---

## [XML Profile - Import URL](https://community.f5.com/t/xml-profile-import-url/34409)

<div class="topic-metadata">

**Author:** [@JohnA\_45647](https://community.f5.com/u/JohnA_45647)\
**Replies:** 7\
**Last updated:** [January 31, 2019, 4:57pm UTC](https://community.f5.com/t/xml-profile-import-url/34409 "2019-01-31T16:57:14Z")

</div>

Hi All I have been searching for an answer but i am unable to find an answer, I am applying multiple schema files to an XML profile and after the first one is added F5 prompts for an “import url” for the additional fi…

---

## [ASM JSON/XML payload detection & Automatically detect advanced protocols](https://community.f5.com/t/asm-json-xml-payload-detection-automatically-detect-advanced-protocols/58052)

<div class="topic-metadata">

**Author:** [@KarimBenyelloul](https://community.f5.com/u/KarimBenyelloul)\
**Replies:** 3\
**Last updated:** [April 17, 2018, 6:51pm UTC](https://community.f5.com/t/asm-json-xml-payload-detection-automatically-detect-advanced-protocols/58052 "2018-04-17T18:51:27Z")

</div>

Hello team, I have a question regarding the learning suggestions, I want to know if it is possible for the ASM to suggest the association of an XML profile to a specific URL. In other words, is there a way to configure…

---

## [How to LoadBalance HTTP 1.1 request](https://community.f5.com/t/how-to-loadbalance-http-1-1-request/18970)

<div class="topic-metadata">

**Author:** [@vjori\_231074](https://community.f5.com/u/vjori_231074)\
**Replies:** 1\
**Last updated:** [February 2, 2018, 4:26pm UTC](https://community.f5.com/t/how-to-loadbalance-http-1-1-request/18970 "2018-02-02T16:26:18Z")

</div>

Hi all, Just to set the enviroment first :slightly\_smiling\_face: We had a customer that wanted to switch from source\_addr persistence profile to a persistence based on a specific identifier that cames into http req…

---

## [Lightboard Lessons:  OWASP Top 10 - XML External Entities](https://community.f5.com/t/lightboard-lessons-owasp-top-10-xml-external-entities/66239)

<div class="topic-metadata">

**Author:** [@ltwagnon](https://community.f5.com/u/ltwagnon)\
**Replies:** 0\
**Last updated:** [January 18, 2018, 1:17am UTC](https://community.f5.com/t/lightboard-lessons-owasp-top-10-xml-external-entities/66239 "2018-01-18T01:17:33Z")

</div>

The OWASP Top 10 is a list of the most common security risks on the Internet today. XML External Entities comes in at the #4 spot in the latest edition of the OWASP Top 10. In this video, John discusses this security r…

---

## [Vulnerabilities file doesn't contain Vulnerabilities Found And Verified By IBM AppScan](https://community.f5.com/t/vulnerabilities-file-doesnt-contain-vulnerabilities-found-and-verified-by-ibm-appscan/54576)

<div class="topic-metadata">

**Author:** [@HarshaPotharaju](https://community.f5.com/u/HarshaPotharaju)\
**Replies:** 5\
**Last updated:** [December 27, 2017, 3:25pm UTC](https://community.f5.com/t/vulnerabilities-file-doesnt-contain-vulnerabilities-found-and-verified-by-ibm-appscan/54576 "2017-12-27T15:25:21Z")

</div>

This is what I got when I tried to import XML output from IBM AppScan to F5 ASM security policy (using vulnerability tool output). Did anyone got the same?

---

## [xml signatures](https://community.f5.com/t/xml-signatures/42454)

<div class="topic-metadata">

**Author:** [@ErkkiS\_295148](https://community.f5.com/u/ErkkiS_295148)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 8:14am UTC](https://community.f5.com/t/xml-signatures/42454 "2017-08-08T08:14:26Z")

</div>

I am trying to create a simple policy for web services/xml which would scan the incoming traffic against generic and xml related violations (without format or schema checks). After creating + assigning a Rapid Deploym…

---

## [Issues modifying XML content with stream profile & iRule](https://community.f5.com/t/issues-modifying-xml-content-with-stream-profile-irule/17139)

<div class="topic-metadata">

**Author:** [@Zuke\_254875](https://community.f5.com/u/Zuke_254875)\
**Replies:** 1\
**Last updated:** [July 25, 2017, 1:43pm UTC](https://community.f5.com/t/issues-modifying-xml-content-with-stream-profile-irule/17139 "2017-07-25T13:43:11Z")

</div>

I’ve taken an iRule from another DevCentral post and modified it to fit my application. when HTTP\_REQUEST { Disable the stream filter for all requests STREAM::disable LTM does not uncompress response content, so …

---

## [Layer 7 Switching + Load Balancing = Layer 7 Load Balancing](https://community.f5.com/t/layer-7-switching-load-balancing-layer-7-load-balancing/67022)

<div class="topic-metadata">

**Author:** [@Lori\_MacVittie](https://community.f5.com/u/Lori_MacVittie)\
**Replies:** 2\
**Last updated:** [May 2, 2017, 4:39pm UTC](https://community.f5.com/t/layer-7-switching-load-balancing-layer-7-load-balancing/67022 "2017-05-02T16:39:52Z")

</div>

Modern load balancers (application delivery controllers) blend traditional load-balancing capabilities with advanced, application aware layer 7 switching to support the design of a highly scalable, optimized application …

---

## [Can I allow Buffer Overflow attack signatures in just an XML request?](https://community.f5.com/t/can-i-allow-buffer-overflow-attack-signatures-in-just-an-xml-request/18726)

<div class="topic-metadata">

**Author:** [@natethegreat\_23](https://community.f5.com/u/natethegreat_23)\
**Replies:** 2\
**Last updated:** [March 30, 2017, 2:14pm UTC](https://community.f5.com/t/can-i-allow-buffer-overflow-attack-signatures-in-just-an-xml-request/18726 "2017-03-30T14:14:28Z")

</div>

The website has an upload page where people can submit receipts. The request looks like this: 4AAQSkD6RXhpZgAuocAAcAAAgMAAAAPgAAAAAc6gAAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA…

---

## [XML and WSDLs](https://community.f5.com/t/xml-and-wsdls/26363)

<div class="topic-metadata">

**Author:** [@Janek\_42109](https://community.f5.com/u/Janek_42109)\
**Replies:** 0\
**Last updated:** [February 16, 2017, 12:43pm UTC](https://community.f5.com/t/xml-and-wsdls/26363 "2017-02-16T12:43:28Z")

</div>

Hello All, Is there a way for the BigIP to exposed the WSDLs when a client request them instead of the backend server. I have set a Security Policy, a XML profile and installed the WSDLs needed. I had a former infrastr…

---

## [Deploy BIG-IP Edge Client (iOS) with configuration string](https://community.f5.com/t/deploy-big-ip-edge-client-ios-with-configuration-string/32187)

<div class="topic-metadata">

**Author:** [@Tut\_307973](https://community.f5.com/u/Tut_307973)\
**Replies:** 0\
**Last updated:** [January 27, 2017, 7:33pm UTC](https://community.f5.com/t/deploy-big-ip-edge-client-ios-with-configuration-string/32187 "2017-01-27T19:33:08Z")

</div>

Greetings all, I’m very new to F5 (only responsible for deploying Edge Client with MDM) and need some basic assistance. Are there any more examples available for Configuration XML strings used to deploy the Edge Client …

---

## [ASM : XML profile and WSDL filtering](https://community.f5.com/t/asm-xml-profile-and-wsdl-filtering/26386)

<div class="topic-metadata">

**Author:** [@Janek\_42109](https://community.f5.com/u/Janek_42109)\
**Replies:** 1\
**Last updated:** [November 29, 2016, 9:01pm UTC](https://community.f5.com/t/asm-xml-profile-and-wsdl-filtering/26386 "2016-11-29T21:01:14Z")

</div>

Hello All, I have a Security Policy to filter XML using a WSDL. The XML filtering is working fine when a client is not following the WSDL. My question is related to the answer made from the backend server. From time t…

---

## [ASM : WSDLs and Allowed URLs List](https://community.f5.com/t/asm-wsdls-and-allowed-urls-list/26334)

<div class="topic-metadata">

**Author:** [@Janek\_42109](https://community.f5.com/u/Janek_42109)\
**Replies:** 1\
**Last updated:** [June 3, 2016, 1:25am UTC](https://community.f5.com/t/asm-wsdls-and-allowed-urls-list/26334 "2016-06-03T01:25:18Z")

</div>

Hello, I’m using ASM module to filter XML traffic with WSDL file. I have an issue with serval security policy. When creating an XML profile, i import an WSDL file and automatically there is an URI added in the Allo…

---

## [ASM - XML Profile Properties : import server certificate failed](https://community.f5.com/t/asm-xml-profile-properties-import-server-certificate-failed/26344)

<div class="topic-metadata">

**Author:** [@Janek\_42109](https://community.f5.com/u/Janek_42109)\
**Replies:** 5\
**Last updated:** [February 16, 2016, 8:49am UTC](https://community.f5.com/t/asm-xml-profile-properties-import-server-certificate-failed/26344 "2016-02-16T08:49:54Z")

</div>

Hello all, On my ASM policy i’m trying to up upload a server certificate on the Web Services Security Configuration in the XML Profile Properties. I have the following error “Validation failed. Please upload valid .PEM f…

---

## [How to support multiple XML schemas in ASM?](https://community.f5.com/t/how-to-support-multiple-xml-schemas-in-asm/31325)

<div class="topic-metadata">

**Author:** [@Greg\_33558](https://community.f5.com/u/Greg_33558)\
**Replies:** 3\
**Last updated:** [August 22, 2015, 5:30pm UTC](https://community.f5.com/t/how-to-support-multiple-xml-schemas-in-asm/31325 "2015-08-22T17:30:23Z")

</div>

We have an XML-over-HTTP web service which we are attempting to protect with the ASM. The problem I am finding is that there are multiple versions of the API, each of which has minor incompatibilities with the others. Th…

---

## [The BIG-IP Application Security Manager Part 5: XML Security](https://community.f5.com/t/the-big-ip-application-security-manager-part-5-xml-security/65585)

<div class="topic-metadata">

**Author:** [@ltwagnon](https://community.f5.com/u/ltwagnon)\
**Replies:** 1\
**Last updated:** [May 5, 2015, 8:19am UTC](https://community.f5.com/t/the-big-ip-application-security-manager-part-5-xml-security/65585 "2015-05-05T08:19:44Z")

</div>

This is the fifth article in a 10-part series on the BIG-IP Application Security Manager (ASM). The first four articles in this series are: What is the BIG-IP ASM? Policy Building The Importance of File Types, Paramete…

---

## [XML Scripts to deploy 3-Tier Application with Cisco APIC and F5 BIG-IP LTM \[End of Life\]](https://community.f5.com/t/xml-scripts-to-deploy-3-tier-application-with-cisco-apic-and-f5-big-ip-ltm-end-of-life/64215)

<div class="topic-metadata">

**Author:** [@Faraz\_147118](https://community.f5.com/u/Faraz_147118)\
**Replies:** 1\
**Last updated:** [January 26, 2015, 4:02am UTC](https://community.f5.com/t/xml-scripts-to-deploy-3-tier-application-with-cisco-apic-and-f5-big-ip-ltm-end-of-life/64215 "2015-01-26T04:02:12Z")

</div>

The F5 and Cisco APIC integration based on the device package and iWorkflow is End Of Life. The latest integration is based on the Cisco AppCenter named ‘F5 ACI ServiceCenter’. Visit Cisco ACI and F5 BIG-IP Integration…

---

## [JSON & XML with ASM](https://community.f5.com/t/json-xml-with-asm/13444)

<div class="topic-metadata">

**Author:** [@swo0sh\_gt\_13163](https://community.f5.com/u/swo0sh_gt_13163)\
**Replies:** 3\
**Last updated:** [January 19, 2015, 8:54am UTC](https://community.f5.com/t/json-xml-with-asm/13444 "2015-01-19T08:54:58Z")

</div>

Hello Pros, I have got a 11.2.1 HF13 BIG-IP, and need to parse JSON data for input validation using ASM. However I am confuse with XML. Is it necessary to use XML when ASM is parsing only JSON data for input validatio…

---

## [\<?xml tag detected as a violation by ASM.](https://community.f5.com/t/xml-tag-detected-as-a-violation-by-asm/13381)

<div class="topic-metadata">

**Author:** [@swo0sh\_gt\_13163](https://community.f5.com/u/swo0sh_gt_13163)\
**Replies:** 1\
**Last updated:** [December 7, 2014, 3:55pm UTC](https://community.f5.com/t/xml-tag-detected-as-a-violation-by-asm/13381 "2014-12-07T15:55:18Z")

</div>

Hello Folks, Just to validate the fact, does it mean that when we see Can anyone please help me confirming this? If that is the case, shall I use XML Policy with ASM to optimize the result of such detection? In cas…

[Next page](https://community.f5.com/tag/xml/279.md?match_all_tags=true&page=1&tags%5B%5D=xml)
