Forum Discussion
I've also wondered this, I'm sure there is a very good reason to put APM infront of ASM/AWAF but you do loose a level of protection or visability on that apm webtop.
Could the process be swopped? AWAF then APM?
Or maybe a AWAF plug in for APM which can feed information back to the APM module to give you both levels of protection?
Feb 23, 2023
Hi PSFletchTheTek,
Yes, we can modify the behavior to process the first ASM module with a Virtual Server Layer and execute protections tan can be applied when the APM is executed first as brute force protection.