Forum Discussion

Muhannad's avatar
Muhannad
Icon for Cirrus rankCirrus
Dec 29, 2021

User gets blocking page instead of captcha for brute force attack

Dears,   I am trying to configure Captcha during brute force attacks for OWA, but i am getting the blocking page instead.   I have read that i need to qualify the URL as a login page. by runn...
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Jan 02, 2022
  1. loginpage.mvc is not an OWA login page
  2. setting "asm.cs.qualified_urls " was a workaround for a bug in v13.1 https://cdn.f5.com/product/bugtracker/ID686108.html
  • this bug was fixed in 14.0.0, 13.1.0.2 - make sure you are using the latest version
  • if you are still experiencing a blocking page you should raise a case with F5 Support