Forum Discussion

2funky_105078's avatar
May 11, 2017

ASM exception in filetypes

If i have a value length for all PHP file types on my web application set to say 100 and only 1 URL with filetype PHP with length 1024, then I have to set the length for all PHP file types to 1024???

 

I don’t know how to do it but maybe I could explicitly configure this very URL with length 1024 and set “Request body handling” to something….

 

What do you think? Can you please show in an example how to do it?

 

  • Either iRule or 2nd conditionally-chosen policy would be a solution to create exception. Personally, I'd apply a flat 1024 byte limit for all .php requests. Keep the management overhead in control, unless you classify the risk significant due to adhere circumstances. In most cases, Byte length limits are not critical settings, as long as they are not set to 'unlimited'. Unlimited setting would not be ideal due to memory exhaustion attacks. '1024' is not too much.

     

    Rgds