i am trying to create a ASM policy -- the condition is --
if an IP address - request -- gets a text in JSON body- data : "INVALID"
5 times in a row -- start dropping requests from that IP address
how would i go along creating this policy -- all help/ideas appreciated
Do you have a JSON or XML profile under the policy if yes check what is allowed:
Also there many things that can cause this so a screenshot of the alarm will be nice.