Forum Discussion

Gerlan_32355's avatar
Gerlan_32355
Icon for Altostratus rankAltostratus
Apr 11, 2017

How to make a Security Dashboard collecting data from ASM?

Hi Guys,

 

I want to do a Security dashboard using some solution like Zabbix. I imagine to put on the screen how many requests was blocket, how many types of each violation occured in a day (E.g. ASM cookie Hijacking, brute force, illegal method) and in the future grow get statistics to each application protected by the ASM. But unfortunately I discovered the ASM in version 11.6.1 doesn't have a option to collect this kind of information.

 

Could someone help me to get this information?

 

2 Replies

  • You can't poll ASM statistics using ZABBIX/SNMP. If you need a Security Dashboard (e.g. for your management) you can:

     

    1. Use the built-in ASM Reporting/Charts feature to E-mail the PDF of the data you are after (all presented using nice pie charts) daily to an e-mail distribution list.

       

    2. Use Splunk or whatever SIEM solution you have to sen the ASM logs to using Logging Profiles. Splunk can provide real-time and scheduled reports for you in a way you want.

       

    If you still want something in Zabbix and you are running ASM less than v11.6 you can send SNMP traps, check this support article:

     

    https://support.f5.com/csp/article/K7738

     

    Hope this helps

     

    Sam

     

  • If you are using SCOM, Comtrade includes an ASM Security Dashboard in its Management Pack.