Forum Discussion

Muhannad_64809's avatar
Muhannad_64809
Icon for Nimbostratus rankNimbostratus
Dec 31, 2015

Protection against XSS cross-scripting infinte attacks tries.

Dears,   The F5 ASM is doing its job by blocking the XSS cross-scripting attacks and block the attack, this is done by the built-in signatures of the WAF. but i still able to keep trying my script...
ASM Advanced WAF
security
Tzoori_Tamam_95's avatar
Tzoori_Tamam_95
Historic F5 Account
Dec 31, 2015

Hi Muhannad, You can certainly use the Session Tracking feature in ASM, where you are able to block an IP, a session, or a username after committing a number of violations. Check this chapter in the manual.

 

  • Muhannad_64809's avatar
    Muhannad_64809
    Icon for Nimbostratus rankNimbostratus
    Jan 01, 2016
    Dear Tzoori, Many thanks for the information, i will try it soon. Regards, Muhannad