Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Sep 17, 2016

ASM XML & JSON parameter learning in Response Body

Hi All,

 

I'm doing a testing on ASM XML/JSON profile on our lab ASM. I have created XML and JSON profile and assigned to respective URL. Parameter I would like to learn are in response body, response body is in XML and JSON (two different URL one for XML and JSON), But I dont see parameters are getting learned and populated under allowed parameter (request from trusted IP).

 

Someone could please help me on this: - XML/JSON parameter learning is possible in response body?

 

Sample response body r4w8173Blad3lyzae

 

I'm using http://testphp.vulnweb.com/ AJAX for XML testing

 

Thanks,

 

Sachin

 

ASM Advanced WAF
security

2 Replies

Sort By
  • Tikka_Nagi_1315's avatar
    Tikka_Nagi_1315
    Historic F5 Account
    Sep 29, 2016

    Sachin,

     

    The short answer to your question "XML/JSON parameter learning is possible in response body?" is Yes.

     

    Have you had a chance to review documentation? Specifically,

     

    https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-getting-started-11-5-0/6.html

     

    SOL13735 - PB identification of JSON parameter type values - http://support.f5.com/kb/en-us/solutions/public/13000/700/sol13735.html?sr=35044458

     

    The manual has a section on JSON parameters - http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-1-0/asm_parameters.html1048180