Forum Discussion

Bugs17's avatar
Bugs17
Icon for Nimbostratus rankNimbostratus
Jun 17, 2022

F5 ASM - Stagged blocking settings is not send to remote log

Hi All, refer to support article https://support.f5.com/csp/article/K15215363 that said stagged attack signature will not send to remote log, but i have some another stagged policy settings is file ...
asm
event log
remote log
security
stagged
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Jun 19, 2022

Maybe check the link below as the logging profile may include the option to send even staged attack signature matches:

 

https://community.f5.com/t5/technical-forum/logging-and-identify-the-violations-from-staged-signatures/td-p/134252

 

 

 

The option in the F5 Advanced WAF logging profile is "Illegal requests, and requests that include staged attack signatures".

 

 

https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-1-0/14.html