For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smouzakis's avatar
smouzakis
Icon for Nimbostratus rankNimbostratus
Sep 29, 2017

Proactive Bot Defense blocks legal traffic

Dear All,   I have created an DDOS Profile with Proactive Bot Defense (Always) enabled. The problem is that the ASM blocks static content (css,js etc..) randomly. Using an irule for logging, the ...
ASM Advanced WAF
security
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Oct 02, 2017

Do you have any irules/local traffic policies on the virtual that control the URI?

 

On v12, the Javascript challenge is delivered from a "fictive" URL (/TSPD/ or /TSbd/)

 

You need to ensure that these paths are passed through any irule/policy to be processed by ASM, and not blocked/redirected.

 

Can you record a session using HTTPWatch until the blocking occurs?