For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

daboochmeister's avatar
daboochmeister
Icon for Cirrus rankCirrus
Aug 30, 2018

ASM - Understanding why "Attack Signature Detected" did not block the access

Env: LTM 11.5.2; Context: Web application   We have an ASM security policy configured and applied to a VIP; the policy is in blocking mode, not transparent; all signatures have "Enforced" = "Yes...
application delivery
ASM Advanced WAF
enforce signature
security
Abdessamad1's avatar
Abdessamad1
Icon for Cirrostratus rankCirrostratus
Aug 31, 2018

Could you check the following ?

 

  • Go to Application Security : Attack Signatures : Attack Signatures List

Make sure that the "Block" and "Enabled" flags of the signatures are set to "Yes".

 

  • Go to Application Security : Policy Building : Enforcement Readiness

Make sure all signatures are enforced.