How to detect & prevent session replay attacks with ASM

[Rico_C]

Hi, is it possible for ASM / AWAF to detect & prevent session replay attacks?

If yes, what are the policy settings that are related to session replay attacks?

Is "session replay attacks" similar to session hijacking?

Any feedback is appreciated. Thanks.

[Daniel_Wolf]

Hi ,

another name for session replay attacks is session hijacking. You can find some high level instructions here:

K40120684: Configuring session hijacking protection

KR

Daniel

[Rico_C]

Thanks 🙂