Blog

F5 and application security, from production.

TMOS insights, ASM behaviour and the things the documentation doesn't tell you, written from real environments.

F5 ASM HTTP Protocol Compliance: Header name with no header value Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Null in request Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Host header contains IP address Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Bad multipart parameters parsing Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Bad multipart/form-data request parsing Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Several Content-Length headers Oct 25, 2026

F5 ASM HTTP Protocol Compliance: CRLF characters before request start Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Unparsable request content Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Check Maximum Number of Parameters Oct 25, 2026

F5 ASM HTTP Protocol Compliance: POST request with Content-Length: 0 Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Bad Host Header Value Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Check maximum number of headers Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Content length should be a positive number Oct 25, 2026

F5 ASM HTTP Protocol Compliance: No Host header in HTTP/1.1 request Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Chunked request with Content-Length header Oct 25, 2026

F5 ASM HTTP Protocol Compliance: Bad HTTP version Oct 25, 2026

1 2