Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Sep 19, 2023

AWAF version 15.1.8.1 does not support Brute Force as one of the attacks for Delayed Blocking

Hi;

With Delayed Blocking, one of the attacks in the list of attacks that can be associated with delayed blocking is "Brute Force, maximum login attemps are exceeded"

For some reason, I cannot find this attack type in the list and I know it used to be there in previous versions of TMOS.

Kindly

Wasfi

application delivery
security
  • Wasfi_Bounni's avatar
    Wasfi_Bounni
    Sep 24, 2023

    I found out from F5 that this feature has been discontinued. It used to be there in versions 11 and 12.

  • whisperer's avatar
    whisperer
    Icon for MVP rankMVP
    Sep 19, 2023

    Thought this was an option for application security access session tracking (APM) and preventing session hijacking and tracking user sessions (ASM).

    • Wasfi_Bounni's avatar
      Wasfi_Bounni
      Icon for Cirrocumulus rankCirrocumulus
      Sep 21, 2023

      The issue is that "Brute Force: Maximum Logins exceeded" is not there as an option as one of the associated violations for delayed blocking under sessions and logins. Although all other violations are in the available list.

      • Wasfi_Bounni's avatar
        Wasfi_Bounni
        Icon for Cirrocumulus rankCirrocumulus
        Sep 24, 2023

        I found out from F5 that this feature has been discontinued. It used to be there in versions 11 and 12.