ADC

Miscellaneous

December 4, 2020

Contributed by:

S S

Following are the resolutions for some of the issues that you might encounter when using Web App Firewall.

Web App Firewall sets window size to 9845 when resetting connection for invalid http messages.

– Malformed request received - connection reset [Client/Server sending invalid content-length header] – Unknown content-type in request headers
System Limit: the application appears frozen

– Occurs when maximum session limit is reached. (100K) – Less system memory for operation.
- IP Reputation feature not working – The iprep process takes about five minutes to start after you enable the reputation feature. The IP reputation feature might not work for that duration.
Unexpected Web App Firewall violations being triggered

– Session timeout has a default value of 900 seconds. If session timeout is set to a low value, browser may trigger false positives for checks which rely on sessionization (e.g CSRF, FFC). Check for session timeout and look at the session ID (cs3 in CEF logs). If the sessionID is different, the session timeout might be the reason. – If form is dynamically generated by javascript, it may trigger false FFC violations.
Empty field name in FFC violation logs (prior to 11.0 release)

This may be seen in scenarios where we come across a form field which is not in the forms in our session.

Scenarios where this may occur:

– The session has timed out from when the form was sent to the client and when it was received. – The form was generated on the client side using a java script.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Miscellaneous

December 4, 2020

Contributed by:

S S

December 4, 2020

Contributed by:

S S

Miscellaneous

In this article