Forum Discussion

P_Casoria_18761's avatar
P_Casoria_18761
Icon for Nimbostratus rankNimbostratus
Feb 16, 2015

ASM module - efficacy testing

Hello everyone, I've deployed an F5 BIG-IP 2000s with LTM and ASM inside my architecture and I need to test the efficacy of Web Application Firewall (ASM module).   I've deployed "WebGoat" applica...
ASM Advanced WAF
deployment
management
security
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Feb 16, 2015

Although your policy is in the blocking mode, you've probably not enforced proper blocking settings.

 

 

Application Security -> Blocking -> Settings

 

1) Make sure the "Current edited policy" is relevant

 

2) Check the "block" tickbox where necessary. You probably have only "learn" and "alarm" tickboxes selected.

 

 

Use the "event logs" and "manual traffic learning" sections to find out the violation types of the requests which were not blocked.