F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Evergrim's avatar
Evergrim
Icon for Altocumulus rankAltocumulus
Nov 27, 2023

ASM DoS Profile blacklist duration

Hi, We had to create a DoS profile for a virtual server at the weekend due to a DoS attack. I have activated three vectors in the profile - Behavioral Anomalous Bad Actors - Stress-based High-Vol...
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Nov 27, 2023

Hi Mohamed_Ahmed_Kansoh,

the screenshot is from my AWAF with v16.1. Today I was looking at a customer environment with AWAF+AFM (v17.1) provisioned and there I had the possibility to switch between AFM view and legacy view. If legacy view is in 17.1, I'm pretty sure it's also in 16.1.

KR
Daniel

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Nov 27, 2023

Hi Daniel_Wolf , 

Great ! 

Maybe this not supported in VEs because I treid to switch multiple times but without luck.

But any way , I think he can't set a duration in AWAF Behavioral Bad actor. 


  • Evergrim's avatar
    Evergrim
    Icon for Altocumulus rankAltocumulus
    Nov 27, 2023

    Hey you two,

    Thank you very much for your answers. They've already helped me to skim through. I'll have a closer look later today.

    Yes, I should have started with that. We have both AWAF and AFM provisioned. And of course I was talking about AWAF. I didn't realize that the article was talking about AFM, of course. Sorry for the confusion.