Forum Discussion

RockBD's avatar
RockBD
Icon for Altocumulus rankAltocumulus
Nov 10, 2024

VAPT or APT tools scan prevention

Hello  When the security team starts Vulnerability Assessment and Penetration Testing (VAPT) or Application Security Testing (APT) on a web application, then it can go and test those web pages tha...
application delivery
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Feb 15, 2025

Maybe you should configure brute force and login page enforcement as people who have not authenticated to not be able open certain urls BIG-IP AWAF Demo 32 - Use Login Page Enforcement with F5 BIG-IP Adv WAF (formerly ASM)  . The VAT will then will need to support authenticated scan and you could see the new F5 scanner Introducing F5 Distributed Cloud Web App Scanning / Web App Scanning Overview | F5 Distributed Cloud Technical Knowledge or other smart scanning tools.