Handling dynamic pseudoparameters in ASM policies

Question

Hi folks,
I have a challenging typo3 web application regarding ASM:
I want to enforce parameters but unfortunately this application uses pseudo parameters for identifying (un)changed files.&nbsp;
A typical request looks like this: GET /typo3conf/ext/sitecore/Common/Public/JavaScript/foundation/foundation.forms.js?137162555&nbsp;
The pseudo parameter is a unix-timestamp.&nbsp;
Can anyone tell me how to configure the ASM to ignore this parameter? Adding a wildcard parameter () on URL level (/typo3conf/ext/sitecore/Common/Public/) doesnt help unfortunately...&nbsp;
Cheers&nbsp;

rob_carr · Answer

Have you tried setting up a no-name type parameter with a wildcard (or possibly a regex expression) on the URL?

chris_campbell1 · Answer

Did you ever get anywhere with this? I've got the same problem.

willerman · Answer

No, unfortunately not :(

boneyard · Answer

it looks like a path parameter you might be able to do something with that, look at the profile, advanced settings: Handle Path Parameters&nbsp;

Forum Discussion

Handling dynamic pseudoparameters in ASM policies

4 Replies

Recent Discussions

Failed to convert character dclid=%EDclid!

ASM - Parent policy vs OWASPcompliance

Rewrite uri translation not working

CONNECTION IS LOST DUE TO SELF IP IS DELIVERED

APM OCSP Responder Issues

Related Content

Auditing Security Policy Updates

Minimizing Security Complexity: Managing Distributed WAF Policies

Intermediate iRules: Handling Strings

Handle False Positive for files upload

Intermediate iRules: Handling Lists