Forum Discussion

LEON_LI_38034's avatar
LEON_LI_38034
Icon for Nimbostratus rankNimbostratus
Aug 28, 2013

About scan ASM VIP

I get through the software (Web Application Firewall detected by Acunetix) to scan my F5 ASM VIP (TMOS 11.3.1 HF6). Results show that the WAF is F5 ASM. How do I set in F5 ASM, that can prevent Acun...
application delivery
deployment
performance
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
Apr 29, 2016

Hello

 

Asm can be identified by its blocking page response or specifoc asm cookies injected. But if acunetix do like qualys, there is no real ways to hide that you are using asm as they fingerprint the tcp stack used by bigip (fingerprinting, tcp response latency,...)