For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sani's avatar
Sani
Icon for Nimbostratus rankNimbostratus
Feb 28, 2017

ASM Brute Force Protection for Micro-Soft ActiveSync

Hello All,   I have configured F5 ASM Brute force Protection for Microsoft-Server-ActiveSync URL using the session based mitigation method with "Login Attempts form Same Client" value set to 2. ...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Mar 28, 2017

I am not a Mobile ActiveSync expert, but it looks like the mobile client is using different URL or username parameter. You need to figure out the difference between a web and mobile client requests by looking at the request logs in ASM and adjust your ASM policy accordingly