Forum Discussion

RockBD's avatar
RockBD
Icon for Altocumulus rankAltocumulus
Nov 10, 2024

VAPT or APT tools scan prevention

Hello  When the security team starts Vulnerability Assessment and Penetration Testing (VAPT) or Application Security Testing (APT) on a web application, then it can go and test those web pages tha...
application delivery
security
MoFaz's avatar
MoFaz
Icon for Moderator rankModerator

Hey RockBD ,

Thanks for your response. Can I clarify that you want to block VAPT scans from scanning browsers that your registered users can access to? 

 

RockBD's avatar
RockBD
Icon for Altocumulus rankAltocumulus
Nov 11, 2024

I want to block unregistered user access from outside world to my web systems. outside access can be VAPT scans or other for unregister users.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Nov 18, 2024

    how you do make a difference between unregistered and registered users?

    • RockBD's avatar
      RockBD
      Icon for Altocumulus rankAltocumulus
      Nov 29, 2024

      Sorry for the late reply. 

      Register user means who have username and password to enter into the site and view the restricted pages. 

      Unregister user are opposite of register user.

       

  • zamroni777's avatar
    zamroni777
    Icon for Nacreous rankNacreous
    Nov 19, 2024

    in that case, you can try adding APM access profile's authentication page to the LTM vserver.
    it's not tunnel mode so shouldnt need apm ccu license.

    i implemented such mechanism using other ADC brand for a corporate banking website.

    surely vapt can still access that webpage but bigip wont forward unauthenticated requests to backend ltm pool members.