Antonio3 Yes, this is possible using BIG-IP ASM/Advanced WAF custom attack signatures. The approach is to match the specific username value submitted in the login request (e.g., in a POST body parameter, cookie, or header) and block it. Let us know if you need more information
Altocumulus
