Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Dec 21, 2012

F5 ASM Attack/Violation Notification by Mail

I want to send attack notification by Mail .

 

I know the Solution speaking about sending Notification Mails by editing alert.conf file :

 

http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html

 

But the issue is that i want to send attack description ( for example : dsallowed file type , or SQL Attack )

 

The below will send only "Violation Detecetd " & will not mention violation details :

 

http://support.f5.com/kb/en-us/solutions/public/7000/700/sol7738.html

 

 

APM
app sec
security

6 Replies

Sort By
  • Ido_Breger_3805's avatar
    Ido_Breger_3805
    Historic F5 Account
    Dec 23, 2012
    Hi,

     

    Have you thought about the risk of ASM DOS'ing your mail server under an attack?

     

    Would love to know more on the use case you have for this request.

     

    Kind Regards,

     

    Ido
  • SSHSSH_97332's avatar
    SSHSSH_97332
    Icon for Nimbostratus rankNimbostratus
    Dec 24, 2012
    Customer Just want to be notified by attacks instead of going through all ASM Logs fro illegal requests

     

  • Torti's avatar
    Torti
    Icon for Altostratus rankAltostratus
    Jan 07, 2013
    Hi,

     

    you can use a syslog server for sending mails. There you can configure all the things you want above.

     

    regards
  • Torti_93733's avatar
    Torti_93733
    Icon for Nimbostratus rankNimbostratus
    Jan 07, 2013
    Hi,

     

    you can use a syslog server for sending mails. There you can configure all the things you want above.

     

    regards
Related Content