Forum Discussion
Rupert_Connell
Altostratus
Altostratus"Spam Sources" blacklist category missing from IP Address Intelligence Categories area
In version BIG-IP ASM v 12.1.2, "Spam Sources" is the only one of the blacklist categories that is not in the IP Address Intelligence Categories area of the Security policy so cannot be selected for ...
Rupert,
This category is not present in ASM IPI as a design decision. We tracked this as ID380836. Effectively Spam Sources is only relevant to SMTP so it was not implemented in ASM. However AFM should contain all categories natively.
Sorry for the trouble.
The ID reflects a change in behavior, not a product defect, so tracking it with the F5 bug tracker isn't possible at this time.
However I tend to agree this is still something that ASM could be allowed to block on. It never hurts to ask at least :)
I would recommend that you open a support case and ask to do a Request for Enhancement to see this category added to ASM for native violation reporting and blocking.
In the meantime the iRule does still allow the full functionality of Brightcloud and through use of the ASM::raise command you can create a custom violation for the spam sources category of IPs. If you have it licensed AFM will also be able to handle these categories extremely efficiently, before the HTTP engine is even engaged.
Let me know if there's anything I can try to expand on.