Forum Discussion

2funky_105078's avatar
2funky_105078
Icon for Cirrus rankCirrus
May 11, 2017

ASM exception in filetypes

If i have a value length for all PHP file types on my web application set to say 100 and only 1 URL with filetype PHP with length 1024, then I have to set the length for all PHP file types to 1024???...
ASM Advanced WAF
exception
security
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
May 12, 2017

Either iRule or 2nd conditionally-chosen policy would be a solution to create exception. Personally, I'd apply a flat 1024 byte limit for all .php requests. Keep the management overhead in control, unless you classify the risk significant due to adhere circumstances. In most cases, Byte length limits are not critical settings, as long as they are not set to 'unlimited'. Unlimited setting would not be ideal due to memory exhaustion attacks. '1024' is not too much.

 

Rgds