For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mkeenan_289714's avatar
mkeenan_289714
Icon for Nimbostratus rankNimbostratus
Oct 09, 2016

What is a good tool to test ASM security policies?

What is a good tool to test ASM security policies? Something like a web application vulnerability scanner?  
ASM Advanced WAF
security
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Oct 09, 2016

Yes, a vulnerability scan. Any vulnerability scan will work, but if you do with the ones ASM supports, you can then import the report in the ASM to a create a policy.

 

Have a look in this link: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-getting-started-12-1-0/4.html

 

This is the Gartner quadrant for application security testing (should tell who is good or not): https://www.gartner.com/doc/reprints?id=1-2KU6P9E&ct=150807&st=sb

 

I also found this link, with a large list of scanners: http://projects.webappsec.org/w/page/13246988/Web%20Application%20Security%20Scanner%20List