Manual Chapter : Configuring server side access to disallowed host violation

Applies To:

BIG-IP ASM

  • 17.5.1
  • 17.5.0
back-action Mitigating Ssrf

Configuring server side access to disallowed host violation

  1. On the Main tab, click Security > Application Security > Policy Building > Learning and Blocking Settings.

  2. Expand Parameters.

  3. Check Alarm and Block fields for the Server-side access to disallowed host violation.

  4. Click Save and then Apply Policy.

The violation is configured. If the user sends any of the disallowed domain name or IP address configured in SSRF hosts list, then the ASM will block the request and sends server-side access to disallowed host violation.

Parent topic:Mitigating Server-Side Request Forgery