Forum Discussion

Felix888_164906's avatar
Felix888_164906
Icon for Nimbostratus rankNimbostratus
Feb 24, 2016

How to setup the get and post data length for a specific URL under one ASM rule

Hi there:

 

I have a ASM rule used for 10 websites. the get and post data length has been configured as 10000/10000 for both get and post. However there is a specific website (example: needs the images uploads, so the requests trigger the ASM to block the request. I don't want to setup the single rule for this website. Is there any solution (irule or something else) I can use for this website to allow the bigger get and posr data length? Thanks for your help.

 

application delivery
ASM Advanced WAF
LTM

2 Replies

Sort By
  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Feb 24, 2016

    The ASM is intended to protect your local web application from attackers, and it is expected that you will have a custom ASM policy for each web application. As such it is expected that you will have rules that match the requests being generated against each web application. Having said all that, the ASM isn't going to do you much good in terms of scanning uploaded images (it's not an antivirus server) and it is probably better to configure the ASM not to scan the images you are uploading. You can either configure this for the specific URL you are uploading to or by disabling ASM using local traffic policies if traffic matches this exact use case.

     

    To configure this by URL go to advanced under the URL in question and configure a header based content profile with an action of Do Nothing.