For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Reza_76713's avatar
Reza_76713
Icon for Nimbostratus rankNimbostratus
Mar 11, 2009

Learn, Alarm, Block settings filer based

Hi, pls see attachment, is there any way to change notification messages based on filter separately?   I like to have some filters only to block, others block and alarm!   Thx
app sec
BIG-IP Access Policy Manager (APM)
security
naladar_65658's avatar
naladar_65658
Icon for Altostratus rankAltostratus
Mar 13, 2009
If you are trying to configure a search filter you can do that by going to Policy > Attack Signatures. Then click "Policy Attack Signatures" on the top menu. Select the web application policy you are wanting to use and click go. After the screen reloads then go to the Learn, Alarm and Block settings and modify those to match the filter you are wanting to create. Then click save filter.

 

If you are wanting to set certain attack signature sets to Alarm and Block or just to Block, go to Policy > Attack Signatures. You will then be on the attack Signature Sets page. In the Assigned Signature Sets box you can toggle Learn, Alarm and Block off for each set name. I do not know if it is possible to toggle those on individual attack signatures.