Difference between revisions of "WAF 340009"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with ''''Rule ID''' 340009 '''Status''' Active rule currently published. '''Alert Message''' Atomicorp.com WAF Rules: Protected Path Access denied in URI/ARGS '''Description''…')

Latest revision as of 14:23, 26 November 2009

Rule ID



Active rule currently published.

Alert Message

Atomicorp.com WAF Rules: Protected Path Access denied in URI/ARGS


This rule detects if a protected path is accessed by a web request. A protected path includes key parts of the operating system, such as c:/windows, /bin, /lib, /dev, /proc and other important parts of the OS.

False Positives

If a web application needs to access these parts of the OS this rule can be triggered. Check to ensure that your application actually needs to access this part of the OS and that this is not an attack. It is not recommended you disable this rule, but rather that you report it as a false positive so we can put out an update for your application.

Instructions to report false positives are detailed on the Reporting False Positives wiki page.

If you wish to tune this rule yourself, please see the Tuning the Atomicorp WAF Rules page for basic information.

Tuning Recommendations

Similar Rules



Knowledge Base Articles


Outside References


Personal tools