We are hardening WAF-as-a-Service to protect against two design limitations and associated vulnerabilities, discovered in the previous firmware.

When an application is in Block mode, under certain configurations is may be possible to bypass the Application Profiles > File Upload Protection and Application Profiles > JSON Profile security features with recently discovered workflows.

For further information on these please see the Security Advisory on Campus.

As always, if you have any questions, please contact us.