Forum Discussion
Rasman_75397
May 25, 2016Nimbostratus
Get rid of log requests from geo IP blocking
Our ASM log gets flooded with requests blocked from Geo IP blocking filter. This makes it hard to find important log events. I have not found any way to get rid of these alerts:
In the...
Arnaud_Lemaire
May 25, 2016Employee
Hello Rasman,
i did not found a native way to do that. But you could in your case use session awareness to do delay blocking. I'm not 100% sure but i think when you block at ip level there will be no more logs on subsequent violations.
- go in sessions & logins/activate session tracking with no login page
- move to delay blocking tab and select a IP address treshold
- then select only access from disallowed geolocation.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects