Forum Discussion

MR_Freddy's avatar
MR_Freddy
Icon for Nimbostratus rankNimbostratus
Jun 30, 2020

BruteForce Mitigation using only One field in login page

Hello,   If we have login page with only field for example "SSN Number" and we need to protect this login page from brute force , Is it possible? we need to verify if the user typed SSN number f...
ASM Advanced WAF
BIG-IP
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Jul 10, 2020

I think the best way will be to use some hidden parameter for password, and then use standard HTML Form login page for Brute Force protection

You can add such parameter via iRule (when HTTP_REQUEST) or add it into application as hidden.

 

Thanks, Ivan