Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exchange / WAF - OWA, ActiveSync 1MB File Limit - SFOS 19 GA

I'm getting following error in WAF-log:

ModSecurity: Request body no files data length is larger than the configured limit (1048576)

Is there a new switch in gui or command line to increase 1 MB limit in V19? There were forum posts some years and some month ago that indicated there would be a solution in future? 

Anything i can do except contacting support? KB-article?

Are these command for advanced shell still usable in V19? still only temporary fix?

## 1. find correct ID:
psql -U nobody -d corporate -c "select name,id,sec_request_body_no_files_limit from tblwafsecurityprofile;"

## 2. Update limit with previously selected ID:
psql -U nobody -d corporate -c "update tblwafsecurityprofile set sec_request_body_no_files_limit='52428800' where id ='7';"

## 3. Check successfully updated value for sec_request_body_no_files_limit:
psql -U nobody -d corporate -c "select name,id,sec_request_body_no_files_limit from tblwafsecurityprofile;"

## 4. Update config:
opcode waf_reconfig -t json -b '{"Entity": "waf_advanced_config", "Event": "UPDATE"}' -ds nosync



This thread was automatically locked due to age.
Parents
  • Hello ,

    You can refer the following commands below, before executing ensure to take a backup of the existing config: 

    psql -U nobody -d corporate -c "select id, name, comment, sec_request_body_no_files_limit from tblwafsecurityprofile;"

    id | name | comment | sec_request_body_no_files_limit
    ----+---------------------------+---------------------------+---------------------------------
    4 | Microsoft Lync | Microsoft Lync | 1048576
    5 | Microsoft RDG 2008 | Microsoft RDG 2008 | 1048576
    6 | Microsoft RD Web 2008 | Microsoft RD Web 2008 | 1048576
    3 | Exchange Outlook Anywhere | Exchange Outlook Anywhere | 1048576
    1 | Exchange AutoDiscover | Exchange AutoDiscover | 1048576
    2 | Exchange General | Exchange General | 1048576
    7 | Exchange General (neu) | Exchange General | 1048576
    (7 rows)

    You can run the following to increase to 52 MB for example
    (for 52MB value will be 5,242,880)

    Support can help you update the size from 1 to your desire value, an example is shown above, with that reference value you can contact support. 

    ==========================================================

    Thanks & Regards,
    _______________________________________________________________

    Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

    Log a Support Case | Sophos Service Guide
    Best Practices – Support Case  | Security Advisories 
    Compare Sophos next-gen Firewall | Fortune Favors the prepared
    Sophos Community | Product Documentation | Sophos Techvids | SMS
    If a post solves your question please use the 'Verify Answer' button.

  • Thanks, @Vivek! 52MB is fine. Will that change stay reboot and gui-waf-update persistent?

Reply Children