For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Or_A_157009's avatar
Or_A_157009
Icon for Cirrus rankCirrus
Dec 18, 2015

Hey Kai,

 

ASM or any other WAF in from of the APM has it's added value since it has it's own signature mechanism and the ability to mitigate attacks which are not always included in the f5 apm module, such as Brute Force, CSRF and many others.

 

in my opinion it's adds another layer of security and visibility.

 

as to it's complex configuration, still haven't found a way to create such and i'm hoping one of the members here will have an idea of solving this.

 

Thanks Or.

 

Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 19, 2015
Hi Or, Thanks for your insights. ;-) Your mileage may vary, especially when it comes to protection for yet unknown threats and the level of visibility. Personally I do believe that most of the ASM security features are not needed for APM and also I'm also not aware that APM module is subject to OWASP top 10 issues. But well, its all about believes, isnt it? So good luck finding a solution to get your desired configuration! Cheers, Kai