For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NhatMinh-TSV_18's avatar
NhatMinh-TSV_18
Icon for Nimbostratus rankNimbostratus
Aug 11, 2015

What's difference btw Device Configuration vs Network in DoS Profile

hi all, When configure DoS Mitigation in BIG-IP (license AFM, ASM). I have a confuse between Device Configuration and Network in DoS Profile. In both of them, I can configure threshold (BAD IP TTL, B...
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Aug 11, 2015

So, as far as I understand, AFM comes with inbuilt layers2-4 DoS protections - enabled by the license and the settings are shown within Device Configuration. For extra protocol DoS protections then you need to configure a DoS profile. With AFM only then this is DNS/SIP protection. With ASM too then this gives you layer 7 DoS protections, again via a DoS Profile (Which you attach to the virtual server).

 

Hope this helps,

 

N