Imperva Cyber Community

communities_1.jpg
 View Only

  • 1.  Fullwidth/Halfwidth Unicode Decoding On URL/Parameter

    Posted 07-13-2023 03:51
    Dear all,
    The alert "Fullwidth/Halfwidth Unicode Decoding On URL/Parameter" happens on one of the request parameter rather frequently. Is there a way to diable this checking on that specific parameter?
    Thank you.

    #On-PremisesWAF(formerlySecuresphere)

    ------------------------------
    Ken Chau
    IT Manager
    ------------------------------


  • 2.  RE: Fullwidth/Halfwidth Unicode Decoding On URL/Parameter

    Posted 07-13-2023 09:07

    Hi Ken,

    You should clone related policy firstly, because it is ADC policy and you cannot modify it. After cloning, you can configure new policy with following options:

    When new policy saved, you should switch old policy with new one by using Apply To tab of the policies.



    ------------------------------
    Cezmi Cal
    technical support engineer
    Barikat Internet Guvenligi Bilisim Ticaret A.S.
    Ankara
    ------------------------------

    Original Message


  • 3.  RE: Fullwidth/Halfwidth Unicode Decoding On URL/Parameter

    Posted 07-14-2023 04:17

    Hi Cezmi,

    Thanks for your reply. It actually comes from the ADC HTTP Protocol Signatures policy of Recommended Signatures Policy for Web Applications, and seems not able to be cloned.

    Best Regards



    ------------------------------
    Ken Chau
    IT Manager
    ------------------------------

    Original Message


  • 4.  RE: Fullwidth/Halfwidth Unicode Decoding On URL/Parameter

     
    Posted 07-14-2023 01:43

    You can go to Main singnature
     
    to find All Signatures for General Applications 
    Search  Fullwidth/Halfwidth Unicode Decoding & "disabled Singtures from all dictionaries


    ------------------------------
    Leo Kao
    engineer
    Taiwan Depository & Clearing Corporation
    Taipei
    ------------------------------

    Original Message