LIVEcommunity - Who Me Too'd this topic

Hello,

SSO is requesting to me to add a rule on policy to alert http request without user-agent (empty) on header.

i know I can use vulnerability by adding a condition when « http-req-user-agent-header » is equal to a regex.
i tried to use the regex .*$ and negate but it don’t work.

Can you help me on the good regex to add ?

Who Me Too'd this topic

L1 Bithead

Me Too date:

Unlock your full community experience!

Who Me Too'd this topic

http-req-user-agent-header