The 7 byte custom signature minimum

nikoolayy1 — Tue, 23 Feb 2021 09:06:55 GMT

Hello Palo Alto,

I am doing a custom combination signature for brute force/Layer 7 HTTP DDOS protection. I am using "http-req-params" to block more than 5 attempts in 10 seconds for a particullar site (

https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/string-contexts/http-req-params.html ). I had ussues as the password parametar is " pass=* " and because of the 7 byte limit I needed to ask the developers to change the parametar name, so it can be longer. I see that in version 10 this limit may have been removed ? I am reading: https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-pattern-requirements.html

Re: The 7 byte custom signature minimum

BPry — Tue, 23 Feb 2021 21:02:32 GMT

@nikoolayy1,

Correct. In PAN-OS 10.0 the 7-byte limit has been removed

Re: The 7 byte custom signature minimum

nikoolayy1 — Wed, 24 Feb 2021 06:09:17 GMT

Thanks for the fast reply. Is there any limit at all or now even 1 byte can be used?

topic Re: The 7 byte custom signature minimum in General Topics

The 7 byte custom signature minimum

Re: The 7 byte custom signature minimum

Re: The 7 byte custom signature minimum