Last Modified: Sep 05, 2025
Affected Product(s):
BIG-IP ASM
Opened: Nov 05, 2021 Severity: 3-Major
Signature exclusion option is not provided for websocket URLs. So, if a signature check needs to be excluded from a certain websocket URL, it has to be done at the policy level which results in the signature getting excluded from all entities and not just one particular URL. This leads to the added burden of including the signature on other entities one by one.
Added burden of manually including signatures on every entity.
Websocket URLs are configured.
Exclude the signature at the policy level and then include the signature on every other entity except the websocket URL
None