Imperva Cyber Community

communities_1.jpg
 View Only
  • 1.  Match criteria for requests with NO referer?

    Posted 05-14-2021 06:10

    I'm trying to create a policy where one of the match criteria is that the request has NO referer.
    There are several match criteria related to referers, but if I try to leave the field blank, SecureSphere won't let me save the policy and returns the message

    • Invalid match criteria parameter value - parameter value may not be empty
    • One of the predicates has an empty list and cannot be saved.

    So, how can I filter for requests with no referers without listing every possible referer and using the "Exclude All" operator?

    Thanks in advance!


    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------

    ------------------------------


  • 2.  RE: Match criteria for requests with NO referer?
    Best Answer

    Posted 05-14-2021 08:24
    If you want to detect/alert the requests having empty value for Referer Header, you can use following:



    ------------------------------
    Cezmi Cal
    technical support engineer
    Barikat Cyber Security
    Ankara
    ------------------------------



  • 3.  RE: Match criteria for requests with NO referer?

    Posted 05-14-2021 08:57
    Beautiful. Thank you!