XML attachment check

The XML Attachment check examines incoming requests for malicious attachments, and it blocks those requests that contain attachments that might breach applications security. The purpose of the XML Attachment check is to prevent an attacker from using an XML attachment to breach security on your server.

If you use the wizard or the GUI, in the Modify XML Attachment Check dialog box, on the General tab you can enable or disable the Block, Learn, Log, Statistics, and Learn actions:

If you use the command-line interface, you can enter the following command to configure the XML Attachment Check:

• set appfw profile <name> -xmlAttachmentAction [**block**] [**learn**] [**log**] [**stats**] [**none**]

You must configure the other XML Attachment check settings in the GUI. In the Modify XML Attachment Check dialog box, on the Checks tab, you can configure the following settings:

• Maximum Attachment Size. Allow attachments that are no larger than the maximum attachment size you specify. To enable this option, first select the Enabled check box, and then type the maximum attachment size in bytes in the Size text box.
• Attachment Content Type. Allow attachments of the specified content type. To enable this option, first select the Enabled check box, and then enter a regular expression that matches the Content-Type attribute of the attachments that you want to allow.
  • You can type the URL expression directly in the text window. If you do so, you can use the Regex Tokens menu to enter a number of useful regular expressions at the cursor instead of typing them manually.
  • You can click Regex Editor to open the Add Regular Expression dialog box and use it to construct the URL expression.