Product Documentation
ADC
14.1 - Current Release 13.1 13.0 12.1
View PDF

Managing CSRF form tagging check relaxations

September 14, 2021
Contributed by: 
S

You configure an exception (or relaxation) to the CSRF Form Tagging security check in the Add Cross-Site Request Forgery Tagging Check Relaxation dialog box or the Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box.

To configure a CSRF form tagging check relaxation by using the GUI

  1. Navigate to Security > Citrix Web App Firewall > Profiles.

  2. In the Profiles pane, select the profile you want to configure, and then click Open.

  3. In the Configure Web App Firewall Profile dialog box, click the Security Checks tab. The Security Checks tab contains the list of Web App Firewall security checks.

  4. To add or modify a CSRF relaxation, do one of the following:

    • To add a new relaxation, click Add.
    • To modify an existing relaxation, select the relaxation that you want to modify, and then click Open.

    The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box is displayed. Except for the title, these dialog boxes are identical.

  5. Fill in the dialog box as described below.

    • Enabled check box—Select to place this relaxation or rule in active use; clear to deactivate it.

    • Form Origin URL—In the text area, enter a PCRE-format regular expression that defines the URL that hosts the form.

    • Form Action URL—In the text area, enter a PCRE-format regular expression that defines the URL to which data entered into the form is delivered.

    • Comments—In the text area, type a comment. Optional.

    Note:

    For any element that requires a regular expression, you can type the regular expression, use the Regex Tokens menu to insert regular expression elements and symbols directly into the text box, or click Regex Editor to open the Add Regular Expression dialog box, and use it to construct the expression.

  6. Click OK. The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box closes and you return to the Modify Cross-Site Request Forgery Tagging Check dialog box.

  7. To remove a relaxation or rule, select it, and then click Remove.

  8. To enable a relaxation or rule, select it, and then click Enable.

  9. To disable a relaxation or rule, select it, and then click Disable.

  10. To configure the settings and relationships of all existing relaxations in an integrated interactive graphic display, click Visualizer, and use the display tools.

  11. To review and configure learned rules for the CSRF check, click Learning and perform the steps in To configure and use the Learning feature.

  12. Click OK.

Managing CSRF form tagging check relaxations
September 14, 2021
Contributed by: 
S
September 14, 2021
Contributed by: 
S

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.