Versions (3)
Version DetailsCurrent
Rev: 1 • May 6, 2022, 12:00 PMET POLICY F5 BIG-IP Publicly Accessible Exposed REST API Detected
alert http [$HOME_NET,$HTTP_SERVERS] any -> $EXTERNAL_NET any (msg:"ET POLICY F5 BIG-IP Publicly Accessible Exposed REST API Detected"; flow:from_server,established; http.stat_code; content:"401"; file.data; content:"resterrorresponse"; fast_pattern; flowbits:isset,ET.F5.exposed.api; classtype:policy-violation; sid:2036505; rev:1; metadata:created_at 2022_05_06, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_05_06;)
May 6, 2022, 12:00 PM
May 6, 2022, 12:00 PM
Sep 21, 2024, 3:00 AM
Sep 3, 2025, 8:34 PM
rules/emerging-policy.rules