For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Or_A_157009's avatar
Or_A_157009
Icon for Cirrus rankCirrus
Dec 18, 2015

Hey Kai,

 

ASM or any other WAF in from of the APM has it's added value since it has it's own signature mechanism and the ability to mitigate attacks which are not always included in the f5 apm module, such as Brute Force, CSRF and many others.

 

in my opinion it's adds another layer of security and visibility.

 

as to it's complex configuration, still haven't found a way to create such and i'm hoping one of the members here will have an idea of solving this.

 

Thanks Or.

 

  • Kai_Wilke's avatar
    Kai_Wilke
    Icon for MVP rankMVP
    Dec 19, 2015
    Hi Or, Thanks for your insights. ;-) Your mileage may vary, especially when it comes to protection for yet unknown threats and the level of visibility. Personally I do believe that most of the ASM security features are not needed for APM and also I'm also not aware that APM module is subject to OWASP top 10 issues. But well, its all about believes, isnt it? So good luck finding a solution to get your desired configuration! Cheers, Kai
  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Dec 21, 2015
    availability? The way sessions are created on the APM and the MaxAccessSession which is not that high on low-middle end platforms... maybe
  • johnebgood_2404's avatar
    johnebgood_2404
    Icon for Nimbostratus rankNimbostratus
    Nov 30, 2016

    I have the same problem, I need end-to-end application attack visibility even in front of the APM module. As it stands we won't be able to tell what types of attacks are happening on the APM hosted pages and this is not acceptable. What are the issues with creating an ASM virtual server in front of the APM module or adding this as a feature? In my professional opinion it should be in front and not behind.

     

  • Or_A_157009's avatar
    Or_A_157009
    Icon for Cirrus rankCirrus
    Nov 30, 2016

    Couldn't agree more. It should be obvious to a security company that APM module needs it's own protection. At the end it's still a web server and it has it's vulnerabilities, the same ones ASM blocks...