For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sri1's avatar
Sri1
Icon for Altocumulus rankAltocumulus
Apr 10, 2019

How ASM can mitigate the web shell attacks?

I have found this doc https://devcentral.f5.com/articles/webshells   This is useful understanding how these attacks work, but not clear about how we exactly mitigate or if ASM need to be configure...
application delivery
ASM Advanced WAF
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 13, 2019

that would be taken care of by the signature sets. these shells execute cat or ls or ... to look into passwd or other things. that is something attack signatures can detect very well.

 

but to be honest if you think there are web shells on your servers you might want to look into that first and get that solved.