Forum Discussion
F5 ASM - current blocking report
Hello everyone, I am currently looking to see if there is any way to find out how much blocking each individual security policy has in place. I have not seen any reports I can run that would show the amount of blocking a policy currently has in place. I am told I might be able to get this info with commands from the iRest API, but I have not had any luck yet. Any input or help would be appreciated. BIG-IP ASM Module.
5 Replies
Hi rsk22
What do you mean by "blocking in place"?
- rsk22
Nimbostratus
When I look at Security Policy Configuration\Attack signatures for each security policy, we can see which signatures are enforced and in blocking, I wanted to see if their was a report I can run to see how many of the enforced signatures have the blocking checkmark. I have attached a jpg to help understand my question.
rsk22 try having a look a this script:
https://lnxgeek.org/doku.php/howtos:disable_an_attack_signature_via_api
It is a script I made to disable a signature but it can easily be modified to your needs.
Let me know if it helps you.
- rsk22
Nimbostratus
I will take a look, thank you.
rsk22 - - If your post was solved it would be helpful to the community to select *Accept As Solution*.
This helps future readers find answers more quickly and confirms the efforts of those who helped.
Thanks for being part of our community.
Lief
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com