Forum Discussion

boneyard_11131's avatar
boneyard_11131
Icon for Nimbostratus rankNimbostratus
Jun 12, 2015

ASM to drop request not block

i believe it isn't possible but just checking to be really sure :)   is it possible with just the normal ASM functionality to drop request? so not the block page or redirect or ...   i know it ...
design
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Jun 12, 2015

You are correct--there is no way to drop a request from within the security policy has you describe. The only functionality that can offer something like you describe is the rate limiting feature in the L7 DoS profile. If you select rate limiting, and the thresholds for requests or latency are reached, then ASM will reset (not drop) the connection.