This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
The methodenforcement-v33-stable has a rule (only one in entire set -
owasp-crs-v030301-id911100-methodenforcement) that is triggering on HTTP
methods our system requires.Found this within the online docs
(https://cloud.google.com/armor/docs/waf-rule...
Is there no way to create exclusions for specific values that appear in
a request's body for the preconfigured rulesets? E.g. I have a value
within a JSON parameter that is triggering a great deal of false
positives, but it seems there is no way to h...
Hi,I'm looking to create a parser extension for the default GCP
Loadbalancer one, since it currently doesn't parse Cloud Armor policy
events if they're in preview mode. I've tried to copy what is used in
the parser for the enforcedSecurityPolicy data...
Independently of me discovering this, I've found out another user from
my org created a support ticket 2-3 weeks ago with the issue outlined,
with no progress made since.
Got it working by using a custom parser instead of an extension and just
adding the content above. Think the first way doesn't work due to this
which says -A parser extension can map data to a repeated field only
when the repeated field is at the low...
I have this - but it appears to overwrite the enforced policy - not
append to to the security_result like I'd want.filter {json {source =>
"message"array_function => "split_columns"on_error => "_not_json"}if
[jsonPayload][previewSecurityPolicy][name]...
