Imperva Cyber Community

Expand all | Collapse all

Look Up a Parameter's Value in Lookup Data Set

  • 1.  Look Up a Parameter's Value in Lookup Data Set

    Posted 01-22-2020 08:02
    Hi,

    I want to search the value of a request parameter in a lookup data set feeding by external list. For example, I want to know whether value of username parameter (like admin, administrator, etc.) is in list or not.

    Is it possible?
    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    cezmi çal
    technical expert
    Barikat Cyber Security
    ------------------------------


  • 2.  RE: Look Up a Parameter's Value in Lookup Data Set

    Imperva Employee
    Posted 01-22-2020 10:03
    Need to make sure I understand 

    HTTP requests can either be GETs or POSTs 
    I assume you are trying to interrogate a POST as it may have a user name in it 
    A GET would be for retrieving 'names' - for example 

    Is that right?

    ------------------------------
    Phil Klassen
    ------------------------------



  • 3.  RE: Look Up a Parameter's Value in Lookup Data Set

    Posted 01-22-2020 10:12
    Hi Phil,

    Yes you are right.

    Is it important for Imperva? As I know, it can detect the parameters for both methods?

    ------------------------------
    cezmi çal
    technical expert
    Barikat Cyber Security
    ------------------------------



  • 4.  RE: Look Up a Parameter's Value in Lookup Data Set

    Imperva Employee
    Posted 30 days ago
    You will need to inspect using two match criteria 
    HTTP request parameter - will match on parameter name 
    - it will not match on the value associated with that  parameter 
    - but you need to use this criteria so we can look in the right field 

    The add HTTP request 
    This is where you specify the value/name you want to alert on 

    HTTP request method
    Recommend using this one to make the policy more efficient

    ------------------------------
    Phil Klassen
    ------------------------------



  • 5.  RE: Look Up a Parameter's Value in Lookup Data Set

    Posted 29 days ago
    Hi Phil,

    Thanks for the response.

    However, HTTP request does not provide lookup data option as "Match Operation" that you can see below:



    ------------------------------
    cezmi çal
    technical expert
    Barikat Cyber Security
    ------------------------------