Forum Discussion

Nuruddin_Ahmed_'s avatar
Nuruddin_Ahmed_
Icon for Cirrostratus rankCirrostratus
Mar 09, 2016

Scanning From Internet

Hi,

 

We have scanning going on from intenet on applications which are hosted behind LTM+ASM. is there an ASM signature set designed for blocking scanning?

 

2 Replies

  • Hi Nuruddin, Assming what you referring some sort of scanning/probing attack; ASM if configured and fine tuned all these type of scanning will be blocked. There could be many varieties of scanning attack like TCP scanning, UDP scanning, ICMP scanning and almost all the probing will be blocked if you have policy with blocking enabled.

     

    cheers

     

  • Could you provide examples of the scanning? Are you seeing a particular entry in the User-Agent header, illegal method, protocol compliance issues, etc?