Forum Discussion
crowe
Cirrus
CirrusASM IP Exceptions
We are new to having ASM implemented on our main virtual servers, over the past couple months I keep having to add IP exceptions for for valid customer IP's that get blocked as "malicious". I assume ...
You need to leave Alarm enabled for malicious IP - in such case you will have ability to monitor how it works and detect (but not prevent) possible attack
youssef1
Cumulonimbus
CumulonimbusHi,
the most important is when building your security policy. You can deploy your policy in staging mode (learning and automatic deployment when required). this will allow you to have an optimal security policy, because as soon as you have a false positive you can create an exception in an explicit way...
to summarize it is relatively important to deploy your security policy in an optimal way and indeed avoid whitelisting. if you have a blocking you must see if it is a false positive and if yes, make the necessary exception at the ASM level (explicitly so as not to make an opening too wide)...
Users are blocked by IP intelligence or by security policy?
regards