Forum Discussion

PowerShellDon_1's avatar
PowerShellDon_1
Icon for Nimbostratus rankNimbostratus
Mar 02, 2017

ASM - Best way to filter out requests containing tilde ~ character?

For PCI, they don't like IIS accepting requests with Tilde (~) characters.

 

I'm presuming ASM is the perfect place to apply a fix for this, can someone help?

 

application delivery
ASM Advanced WAF
BIG-IP
security

1 Reply

Sort By
  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Mar 02, 2017

    This answer is pulled off of a 12.1.0 box (simply because that's what I have up at the moment), but you can disallow characters here:

     

    Security ›› Application Security : Parameters : Character Sets : Parameter Value

     

    tilde appears to be disallowed by default.