Forum Discussion

Oscar77's avatar
Oscar77
Icon for Nimbostratus rankNimbostratus
Oct 11, 2021

AWS F5 Bot Rules Protection ¿any testing page to test effectively use cases?

Hi there!

 

We have purchased in AWS F5 all rules (OWASP, Bot, API prot. and CVE's)

 

Atm we want to test all of them, any webpage with common example attacks to test if it works? we can start with Bot Protection.

 

Thanks all.

F5 Rules for AWS WAF
security

1 Reply

Sort By
  • gocker99's avatar
    gocker99
    Icon for Employee rankEmployee
    Oct 29, 2021

    Hello! F5 does not have a webpage to send test attacks at your site but there are third party apps you can use.

     

    We would recommend starting with covering the OWASP attacks as those are most common.

     

    Here is the OWASP testing guide: https://owasp.org/www-project-web-security-testing-guide/

     

    Here is the location of OWASPS free ZAP attack proxy: https://owasp.org/www-project-zap/

     

    After applying the rules and then testing with ZAP, that will test the OWASP top 10 and API type attacks.

    CVE attacks are more difficult as there are not always proof of concept attacks that are public.