NimbostratusIs there anyway to setup the ASM just to block Brute force logins only?
We are new to the product and just want to turn on features of ASM one at a time since there are so many options.
NimbostratusHi JQUINONES82NB,
Try this one:
1.You need to create a Login URL on Security › Application Security : Anomaly Detection : Brute Force Attack Prevention.
2.Create a Login URL Page on Brute Force Protection Configuration.
3.And set CAPTCHA Bypass Mitigation "Alarm and Drop / Alarm and Bloking page" on Source-based Brute Force Protection.
Regards,
EmployeeYes. If you go to the Learning and Blocking settings page you will see the learn, alarm, and block checkboxes for every violation. Your approach is wise in order to phase in protection gradually. You can de-select (uncheck) the block option for every violation until you are confident that your policy is mature and ready to block.