Forum Discussion
Jaspreetgurm
Altocumulus
AltocumulusOTP Flood Attack mitigation
We have application which is sitting behind our F5 WAF, where application receiving high voulme of OTP request on server to generate OTP SMS by attacker. People receiving unwanted OTP message on thei...
ragunath154
Cirrostratus
Cirrostratususe the Microservice feature under bot profile.
https://support.f5.com/csp/article/K42323285#sect3
either use the predefined Treat protection like login Protection,Search Protection etc or
use Custom Microservice Protection
set a proper threshold under automate threat detection and mitigation action .
other way create custom signature or bot signature which matches the attacker user agent (if it is something fissy)