Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 3930 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block High bit characters

mrshahin
Hi,

Could some one tell me if sopho allows characters like % in the url?
we have some websites that some where in the url they have chracters like % and in the TMG we disable this option:
Block High bit characters

does the Sopho block this as well? if yes how can we resolve this.

Shahin


This thread was automatically locked due to age.
Parents
  • 0
    It seems both Frank and I were confused by the verbage in the original post.  There is no setting in the UTM to specifically block % characters, so you should be good there.  That being said, WAF (Web Application Firewall) has hundreds of protective rules that you can enable by category in a Firewall Profile.  It is not uncommon during initial rollout to find that some rules are triggered falsely in your unique environment.  If this happens, you can get the rule ID number from the WAF log, then easily skip that rule.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    It seems both Frank and I were confused by the verbage in the original post.  There is no setting in the UTM to specifically block % characters, so you should be good there.  That being said, WAF (Web Application Firewall) has hundreds of protective rules that you can enable by category in a Firewall Profile.  It is not uncommon during initial rollout to find that some rules are triggered falsely in your unique environment.  If this happens, you can get the rule ID number from the WAF log, then easily skip that rule.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
No Data
Unfiltered HTML