Forum Discussion

Bill_McCreath_9's avatar
Bill_McCreath_9
Icon for Nimbostratus rankNimbostratus
Nov 07, 2013

Can ASM block repeat requests in a specific time interval

Hi, We are relatively new to ASM and although covered the course I've had a question from the user I'm not sure about. When a user connects to the application they are given a unique reference. What we want to do is to be able to limit the number of a specific request type that a user can submit within a given time frame. For example for a specific connection we only want to allow 3 of Request Type A per minute. Is this achievable within ASM and/or irules ? Identifying the Reference and Request type is not an issue, I just can't figure how I might be able to count over a time interval and then block

 

many thanks for any tips, even to say if it can't be done

 

security

2 Replies

Sort By
  • Pragathishakart's avatar
    Pragathishakart
    Icon for Nimbostratus rankNimbostratus
    Dec 31, 2013

    I have just searched for the similar query raised by you. I hope it may be useful. Please read from the section "Setting up ASM session tracking with APM" in the below link.

     

    http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-4-0/12.html?sr=34162090

     

  • SanjayP's avatar
    SanjayP
    Icon for Nacreous rankNacreous
    Dec 31, 2013
    using ASM you can limit rate of requests (HTTP Throttling), configuring DoS protection settings (version prior to 11.3 it is part of ASM policy under Anomaly detection --> DoS attack prevention.) If you want to limit type of HTTP requests (GET/POST/PUT/DELETE) per minute iRule is the only way. - Sanjay