WAF error "ModSecurity: Request body no files data...."

Hi Regex,

Thank you for reaching out to Sophos Community.

Apologies for the experience, and thank you for sharing this.

For reference

•  Exchange / WAF - OWA, ActiveSync 1MB File Limit - SFOS 19 GA 

Indeed i have found this "solution" but its temporary. Infact its been over 3 years and Sophos didnt provide solution for it even for Business I hope its gonna change soon.

Its worth to mention that after messing around with above commands, you loose ability to modyfi existing protection rules in "web server -> Protection"

I think, that SOPHOS is aware of that WAF in XG must be rebuild/repaird. Maybe this is gonna be a start(a must):

www.trustwave.com/.../

Hi Erick Jan,

is there any solution for the problem with "ModSecurity: Request body no files data length is larger than the configured limit"?

We have transfer errors to our web server and waf. The size limit is 1048576, but partially the data can be transferred although it is more than 1 MB.

Thanks.

Bernd

Hello,

This was a bug that has been fixed in 19.0 MR2 and 19.5 MR1. It was not related to changes made to the configuration through the database, but it was triggered when you tried to change the protection policy over the UI after it has been assigned to a WAF rule.

Best regards,

Attila Kovacs

Hello,

The recommended solution is to tweak sec_request_body_no_files_limit as mentioned above. This value is for a single request, so whether or not a transfer succeeds depends on the way the backend application handles the transfer. It it uses chunked transfers, larger sizes can be transferred successfully as long as the chunk size is under the set limit. If the transfer happens in a single request, then the maximum file size is the one you configure.

Best regards,

Attila Kovacs