For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Erwin_25552's avatar
Erwin_25552
Icon for Nimbostratus rankNimbostratus
Nov 19, 2014

Bruteforce mitigation on JSON parameters

Hi All,   I would like to know the possibilities to protect a webserver,against bruteforce attacks, who uses JSON parameters. In the ASM, the default option is, to protect a loginpage. The webapp...
ASM Advanced WAF
deployment
design
JSON
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Nov 24, 2014
Hi Erwin, you should be able to configure protection against multiple requests from a single source by configuring a login page and then defining thresholds for it. I don't think you need to worry about JSON parameter complications for this. In ASM, go to Application Security>Anomaly Detection>Brute Force Attack Prevention, and then create a page that you want to protect. You can specify exactly how many attempts from the same client will be allowed.