For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Robert_78467's avatar
Robert_78467
Icon for Nimbostratus rankNimbostratus
Aug 01, 2016

ASM IP reputation block decision

How do the Brightcloud IP reputation categories map into the F5 decision to block or not? On their website the Brightcloud scores are as follows 1-20 are high risk IPs, 21-40 are suspicious IPs, 41-60 are generally benign IPs, 61 - 80 are benign IPs and 81 to 100 are good IPs. Does a score of and below constitute a block 20 or a score of 40 and below?

 

ASM Advanced WAF
security

1 Reply

  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    Aug 02, 2016

    The ASM doesn't block specifically by reputation number, but by category.

     

    https://support.f5.com/kb/en-us/solutions/public/13000/800/sol13875

     

    When you setup blocking in ASM, you will have the option of selecting which categories to block on.

     

    https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-6-0/6.htmlunique_1189953689