Forum Discussion

Jordi_Feu_32626's avatar
Jordi_Feu_32626
Icon for Nimbostratus rankNimbostratus
Sep 01, 2010

Setting Brute Force Attack for OWA 2003

Hi,

 

 

I am quite new in ASM and even in OWA. Does anybody know how to set up Brute Force Attack for OWA 2003? I tried several times to configure it but it has no effects.

 

 

I tried as Login URL:

 

 

/exchweb/*

 

/exchange/

 

 

I tried HTML Form and NTLM as Authentication Type but no luck.

 

 

I would appreciate any help.

 

 

Thanks in advanced.
app sec
BIG-IP Access Policy Manager (APM)
security
  • Ben_Cuthbert_90's avatar
    Ben_Cuthbert_90
    Historic F5 Account
    Sep 13, 2010
    Hi Jordi

     

     

    What have you setup in the protection settings, is the operation mode set to transparent or blocking?

     

     

    Have you added access validation strings?

     

     

    And how are you then testing it? Do you have a traffic generator to test it?
  • Ben_Cuthbert_90's avatar
    Ben_Cuthbert_90
    Historic F5 Account
    Sep 13, 2010
    Also chapter 7 of the configuration guide has a good step by step for brute force protection if you dont have it, it's on ask.f5.com