Forum Discussion

Jayesh__Patel_3's avatar
Jayesh__Patel_3
Icon for Nimbostratus rankNimbostratus
Nov 14, 2018

F5 ASM - Parameter Meta Character Not Blocking

Hello,

 

I have an issue where parameter meta characters are not being blocked. See screenshots below,

 

The policy is set to blocking, i have set the parameter length to a max of 5 and is blocked when parameter length exceeds 5. However there is no blocking based on the meta characters, when I put value of ! or O in the parameter, there is no blocking and I cannot not understand why.

 

Could someone please help me?

 

Thank You

 

ASM Advanced WAF
security

4 Replies

Sort By
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 21, 2018

    Is this still an issue? Have you enabled blocking for "illegal meta character in parameter value"?

     

  • Jayesh__Patel_3's avatar
    Jayesh__Patel_3
    Icon for Nimbostratus rankNimbostratus
    Nov 21, 2018

    Hello, Yes still an issue, from the 1st screen grab the "illegal meta character in parameter name" is set to block

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Nov 21, 2018

    The configuration you highlight in the second screenshot is the parameter value not name. A parameter is a name/value pair. In this case name = id and value = something (but should block if you add a disallowed entry)

     

  • Jayesh__Patel_3's avatar
    Jayesh__Patel_3
    Icon for Nimbostratus rankNimbostratus
    Nov 21, 2018

    Sorry, i understand what you mean by value and name, i dont see “illegal meta character in value” only name option to block. Do you know where i can find it?