For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anwar_csengg_25's avatar
Anwar_csengg_25
Icon for Nimbostratus rankNimbostratus
Mar 20, 2016

fix needed for ASM Web scraping attack

Dear Folks,   Here I am explaining the scenario what we are facing in our environment.   When user perform any activity in the applications, then Request is not going to the server. Requests ha...
ASM Advanced WAF
devops
security
John_Buchanan's avatar
John_Buchanan
Icon for Nimbostratus rankNimbostratus
Mar 21, 2016

Does the URI follow a pattern of /teamworks/*? Have you added that as an allowed URL? Also could you share the details of the violation event? What does the User-Agent string look like? Are these requests coming in programmatically as the result of automated testing? Have you adjusted the thresholds for Web-Scraping detection, increased values for Bot Detection, Session Opening, and Session Transactions Anomaly?