F5-ASM-AdvWAF experiment-some basic knowledge (2)

1. F5-ASM http service flow description diagram

2. If F5 is associated with an irule distributed based on host, then enable LTP(Local Traffic Policy).

Note: When configuring LTP policies, host and url are at the same level, that is, you cannot do host first, and then do refined distribution according to uri (of course, asm policies are fine according to host)

3, http protocol description, recommended tutorial tcp/ip detailed explanation 1, 2, 3

Difference between get and post

Common http method security issues

5, file type, paramater, urls Description, url of F5 is different from the general url concept,

URL is usually a subset of uri, and F5 is the reverse of simple mnemonics.

6. F5 integrates active defense and passive defense. If there is an active defense strategy, the data flow will match the active defense strategy first.

Proactive Defense Workflow

Passive Defense Workflow