For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NhatMinh-TSV_18's avatar
NhatMinh-TSV_18
Icon for Nimbostratus rankNimbostratus
Aug 11, 2015

What's difference btw Device Configuration vs Network in DoS Profile

hi all, When configure DoS Mitigation in BIG-IP (license AFM, ASM). I have a confuse between Device Configuration and Network in DoS Profile. In both of them, I can configure threshold (BAD IP TTL, BAD IP VERSION, ICMP FLOOD..) but I can't distinguish that parameter in two area: Device Configuration and DoS Profile.

 

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Aug 11, 2015

    So, as far as I understand, AFM comes with inbuilt layers2-4 DoS protections - enabled by the license and the settings are shown within Device Configuration. For extra protocol DoS protections then you need to configure a DoS profile. With AFM only then this is DNS/SIP protection. With ASM too then this gives you layer 7 DoS protections, again via a DoS Profile (Which you attach to the virtual server).

     

    Hope this helps,

     

    N