Where to modify settings for disallowed

We recently upgraded to 13 and am an now seeing for a policy ASM blocks from disallowed user/session IP / Device ID. Description notes: The system detected that the number of violations from the same User/Session/IP/Device ID within the specified time frame is above the configurable limit within session awareness. Where are the settings for turning on, off, modifying?? Thank you!