For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mherman31_24878's avatar
mherman31_24878
Icon for Nimbostratus rankNimbostratus
Dec 01, 2016

AMS brute force protection Dynamic

Hi All,   I have problem with configuring AMS brute force protection on logon page on 11.6.0 HF5   I'm configuring clear ASM with checked "block" in "Brute Force: Maximum login attempts are exc...
application delivery
ASM Advanced WAF
BIG-IP
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Dec 02, 2016

Brute force protection requires the identification of a login page that you wish to protect. The brute force protection mechanism counts failed login attempts, not simply requests per second. Are your curl requests aimed at a login page? If not, try using web scraping bot detection. It sounds like that's what you are after.