Web Application Firewall blocks images

opus · ‎03-29-2018

Visit http://ir.savills.com/en/financial-information/company-reports/2017.aspx, images are blocked by Web Application Firewall and reported as Known Exploits.

What should I do other than disable the "Know Exploits" option?

Markus · ‎03-29-2018

You can add another Policy in front with destination (fqdn) address object http://ir.savills.com and add another waf profile, where you disable generic attacks

or

you can whitelist the site in CLI (you have to define an address objekt too)

conf waf profiles

edit *your profile"

conf address-list

set trusted-address *your address object*

________________________________________________________
--- NSE 4 ---
________________________________________________________