XML attachment check
The XML Attachment check examines incoming requests for malicious attachments, and it blocks those requests that contain attachments that might breach applications security. The purpose of the XML Attachment check is to prevent an attacker from using an XML attachment to breach security on your server.
If you use the wizard or the GUI, in the Modify XML Attachment Check dialog box, on the General tab you can enable or disable the Block, Learn, Log, Statistics, and Learn actions:
If you use the command-line interface, you can enter the following command to configure the XML Attachment Check:
set appfw profile <name> -xmlAttachmentAction [**block**] [**learn**] [**log**] [**stats**] [**none**]
You must configure the other XML Attachment check settings in the GUI. In the
Modify XML Attachment
Check dialog box, on the
Checks tab, you can configure the following settings:
-
Maximum Attachment Size. Allow attachments that are no larger than the maximum attachment size you specify. To enable this option, first select the Enabled check box, and then type the maximum attachment size in bytes in the
Size
text box. -
Attachment Content Type. Allow attachments of the specified content type. To enable this option, first select the Enabled check box, and then enter a regular expression that matches the Content-Type attribute of the attachments that you want to allow.
- You can type the URL expression directly in the text window. If you do so, you can use the
Regex Tokens
menu to enter a number of useful regular expressions at the cursor instead of typing them manually. - You can click Regex Editor to open the
Add Regular Expression
dialog box and use it to construct the URL expression.
- You can type the URL expression directly in the text window. If you do so, you can use the