Forum Discussion

Bugs17's avatar
Bugs17
Icon for Nimbostratus rankNimbostratus
4 years ago

F5 ASM - Stagged blocking settings is not send to remote log

Hi All, refer to support article https://support.f5.com/csp/article/K15215363 that said stagged attack signature will not send to remote log, but i have some another stagged policy settings is file ...
asm
event log
remote log
security
stagged
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
4 years ago

Maybe check the link below as the logging profile may include the option to send even staged attack signature matches:

 

https://community.f5.com/t5/technical-forum/logging-and-identify-the-violations-from-staged-signatures/td-p/134252

 

 

 

The option in the F5 Advanced WAF logging profile is "Illegal requests, and requests that include staged attack signatures".

 

 

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-1-0/14.html