Forum Discussion

philyeo_72087's avatar
philyeo_72087
Icon for Nimbostratus rankNimbostratus
Feb 24, 2015

ASM DoS Protection and Trust-XFF-Header

Does anyone know if the ASM DoS Protection will respect the IP Address defined the the ASM Policy Configuration (Advanced), where you can enable "Trust XFF Header" which specifies the HTTP Header to ...
ASM Advanced WAF
dos
security
Erik_Novak's avatar
Erik_Novak
Icon for Employee rankEmployee
Feb 24, 2015

You should be able to do this by enabling "Accept XFF" on the HTTP profile (Local Traffic>Profiles>Services>HTTP> Properties. This ensures the DoS profile will trust the XFF you specify, rather than the security policy. This method started with v11.5.1.