"is_vpns_attack_request Dropping invalid HTTP request, ...etc." logs displayed in /var/log/messages or /var/log/ns.log

"is_vpns_attack_request Dropping invalid HTTP request, ...etc." logs displayed in /var/log/messages or /var/log/ns.log

book

Article ID: CTX280067

calendar_today

Updated On:

Description

"is_vpns_attack_request Dropping invalid HTTP request, ...etc." logs displayed in /var/log/messages or /var/log/ns.log

Resolution

These logs are added to alert the customer for potential attempts and you can check in upstream devices to ADC from where these requests are coming

Problem Cause

As a part of fix in the builds released for CVE-2019-19781,
the following warning messages have been added in /var/log/messages and /var/log/ns.log

is_vpns_attack_request: Found '/vpns/' in unwanted place
is_vpns_attack_request: Dropping invalid HTTP
requestis_path_traversal_or_vpns_attack_request: Dropping HTTP request with invalid Header/version
is_path_traversal_or_vpns_attack_request: Path traversal detected
is_path_traversal_or_vpns_attack_request: Found '/vpns/' in unwanted place
is_path_traversal_or_vpns_attack_request: Dropping invalid HTTP request