Evasion Technique Violation Protection¶
Overview¶
Evasion techniques refer to techniques usually used by hackers to attempt to access resources or evade what would otherwise be identified as an attack. Like HTTP compliance, evasion techniques have a list of sub-violations that can be configured for additional granularity and to reduce false positives.
Prerequisites¶
Verify any attached application services to ensure proper security after changes are deployed.
You need to have a user role of Security Manager or Administrator to manage a WAF policy.
How to manage evasion technique violations¶
Evasion technique violations are automatically enabled or disabled on a policy based on your selected template. You can use this process to manually enable or disable violations configured to your policy.
Click the workspace icon next to the F5 icon, and click Security.
From the left menu click Policies under WAF.
Select the name of the policy.
A panel for the General Settings opens.
From the panel menu, click Evasion Techniques.
The panel displays evasion technique violations.
Toggle the button next to each violation to enable or disable policy enforcement.
Click Save.
If you have completed your changes to the policy, click Deploy to update associated BIG-IP Next instance(s).
To confirm the deployment, click Deploy.
Resources¶
Manage using API¶
Violation Settings¶
Evasion technique protection management using the policy Editor¶
Edit the WAF policy JSON declaration directly through the WAF policy editor.