Disable Attack Signature on particular JSON parameter

Question

Hello Experts&nbsp;
I need to disable one false positive attack signature on one particular JSON parameter. I do not want to disable it for whole JSON profile. How I can do that? The parameter looks like Description: "some value"&nbsp;

tzoori_tamam_95 · Accepted Answer

Unfortunately, ASM cannot disable a signature on a specific JSON element at this time.&nbsp;

ghost-rider_124 · Answer

Thanks for your reply. Also it possible to learn the JSON parameters?

tzoori_tamam_95 · Answer

Sadly, not at this time.

allwyn_mascaren · Answer

Hi Tzoori,&nbsp;
Is there an update on this in version 12 or 13 now?&nbsp;

Forum Discussion

Disable Attack Signature on particular JSON parameter

4 Replies

Recent Discussions

F5 Rseries HA

Error when running bigip_command Playbook against LTM : Syntax Error: unexpected argument /bin/sh\n

Can iRule be used to perform exception of IPI category based on Geolocation

Can iRule mask the payload content on event logs of security

minimum tmos software version for connect CIS (openshift)

Related Content

Wildcard Parameter signature attack

Support of WAF Signature Staging in F5 Distributed Cloud (XC)

Mitigating JSON-based SQL injection with BIG-IP ASM / Advanced WAF Attack Signatures

Brute Force protection for single parameter like OTP

F5 ASM/AWAF Remote File Inclusion signatures do not block http:// or https:// in the form parameter