Forum Discussion

Hussein_Ghazy's avatar
Hussein_Ghazy
Icon for Nimbostratus rankNimbostratus
May 20, 2016

Filter Specific ajax requests under a URL and grant access accordingly

Hi All,   I have special requirement for the ASM to check on "xyz" parameter and only grand access to the web server if the value of the parameter is mapmap or xy_get_data.   I created the para...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 25, 2016

If your parameter is only allowed to have two permitted values create it as a static parameter type in your policy and add your allowed values as static values. Make sure "Allow Empty Value" is un-ticked. Make sure your policy is blocking on violation: "Illegal static parameter value" .

 

That's it!