Forum Discussion

jkieffer's avatar
jkieffer
Icon for Nimbostratus rankNimbostratus
Dec 23, 2019

Blocked Not rated requests ASM

Hello,

 

I am reviewing some logs on my F5 and it happens that during a minute the F5 blocked some requests that have a violation rating of "Not rated" and I don't understand what happened at this time.

Did someone already encounter this situation and know why an F5 could act like that ? (it is not the same url, not the same client, not the same asm policy)

 

Best Regards.

ASM Advanced WAF
security
  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Dec 27, 2019

    Not rated means there was no violation. It could be a secondary HTTP request that occurred after a blocking event. Are there mitigations other than a security policy in place? Such as bot defense profile?

  • jkieffer's avatar
    jkieffer
    Icon for Nimbostratus rankNimbostratus
    Jan 02, 2020

    Thanks for your answer.

    I don't think that there are others protection in place, I will check next weeks.

    But what is strange is the fact that during a small period of time I had only these not rated events and no violation detected.