Forum Discussion

raghav_rao_2526's avatar
raghav_rao_2526
Icon for Nimbostratus rankNimbostratus
May 17, 2016

Best practice value to have

Hi Folks!   We want to enforce session timeout and acceptable intensity rate in our WAF for couple of applications. Kindly let us know what are the best practice value which needs to be set for "S...
ASM Advanced WAF
security
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
May 17, 2016

"Session idle timeout" - 15 mins is common for internet banking front-ends.

 

"Acceptable intensity rate" - I'm not sure what it is. Are you talking about ASM/L7 DOS protection profile configuration? Where did you find this 'acceptable intensity rate' setting?

 

raghav_rao_2526's avatar
raghav_rao_2526
Icon for Nimbostratus rankNimbostratus
May 17, 2016
Hi Hannes, Yes, the intensity rate is for L7-DOS. I'm new to F5, I remember having this setting in Barracuda, hence I thought it will in F5 as well but with a different name. Cheers, Rao