Encoded URI being broken by WAF

Hello

we have the same problem with our gitlab server.

2017:08:31-09:05:04 httpd[28330]: [core:notice] [pid 28330:tid 2938100592] [client 10.0.254.240:51432] AH00026: found %2f (encoded '/') in URI (decoded='/CB/bsp/network/feature/core'), returning 404, referer: https://ourdomain/CB/bsp/network/develop

In the apache there is a AllowEncodedSlashes directive.

But I did not found anything in the Sophos UTM.

Hi, did you ever find a solution for this? I've the same problem with SAP Fiori Launchpad!

Yes, I found a solution.
You must add some settings to the apache config.

/var/storage/chroot-reverseproxy/usr/apache/conf/waf/base.conf

Add here this line

AllowEncodedSlashes ON

Then restart the Proxy

/var/mdw/scripts/reverseproxy restart

This change is for all proxy settings.

You can add the line also to one configuration but after a restart or a change you must add it again.

/var/storage/chroot-reverseproxy/usr/apache/conf 

Regards

Thanks, Benjamin and welcome to the UTM Community!

It's always great to see a first post be something that helps the rest of us!

Cheers - Bob

Thanks Ben

I had moved this service to another firewall as it was not fixed on this. I will test it out here again and let you know

For another workaround of this missing configuration option see: https://community.sophos.com/products/unified-threat-management/f/general-discussion/92242/utm-9-reverse-proxy-configuration/436406#pi2353filter=answers&pi2353scroll=false