KB: 00001058

How to prevent sites from XML bomb attack?

Problem Statement

Client wants to protect their sites from XML bomb attack which are protected by Haltdos solutions.

SOLUTION

The client can achieve the above requirement by configuring XML policies.

1. First, log into the haltdos management console.

2. Go to Stacks > WAF > Listener > Profile > Profile default setting > Policy > XML policy > Configure XML policy > Save Changes

3. Now send bulk XML to the respective listener.

4. Below WAF incident is showing dropped request when bulk XML payload hit the listener.