The 7 byte custom signature minimum

[nikoolayy1]

Hello Palo Alto,

I am doing a custom combination signature for brute force/Layer 7 HTTP DDOS protection. I am using "http-req-params" to block more than 5 attempts in 10 seconds for a particullar site (

https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-... ). I had ussues as the password parametar is " pass=* " and because of the 7 byte limit I needed to ask the developers to change the parametar name, so it can be longer. I see that in version 10 this limit may have been removed ? I am reading: https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-...

[BPry · Accepted solution]

@nikoolayy1,

Correct. In PAN-OS 10.0 the 7-byte limit has been removed

[nikoolayy1]

Thanks for the fast reply. Is there any limit at all or now even 1 byte can be used?