Forum Discussion

Glenn_32974's avatar
Glenn_32974
Icon for Nimbostratus rankNimbostratus
Jul 26, 2014
Solved

ASM IPI not stopping TOR browsing

Im using TOR right now as part of my testing before going live with ASM + IPI and Im able to hit the sites my WAF is supposed to be protecting... I though that with IPI my WAF would stop the connection at the TCP layer not letting the user load the full page? Why is this not happening?

 

anyone has had issue like this?

 

ASM Advanced WAF
security
  • bhs_114985's avatar
    bhs_114985
    Jul 26, 2014

    IPI gets its intelligence from webroot/brightcloud every 10 mins. You can check a rating here. If you disagree with the rating you can request a change right from the output page. Once the change goes into affect you should get the update within 10 mins and the alarming/blocking behavior you are looking for.

     

6 Replies

Sort By
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Jul 26, 2014

    Check your IP from here to see if it is listed:

     

    http://www.brightcloud.com/tools/url-ip-lookup.php

     

    If yes, there could be possibly policy misconfiguration on your ASM policy

     

  • Michael_Koyfman's avatar
    Michael_Koyfman
    Icon for Cirrocumulus rankCirrocumulus
    Jul 26, 2014

    Check your IP from here to see if it is listed:

     

    http://www.brightcloud.com/tools/url-ip-lookup.php

     

    If yes, there could be possibly policy misconfiguration on your ASM policy

     

  • bhs_114985's avatar
    bhs_114985
    Historic F5 Account
    Jul 26, 2014

    IPI gets its intelligence from webroot/brightcloud every 10 mins. You can check a rating here. If you disagree with the rating you can request a change right from the output page. Once the change goes into affect you should get the update within 10 mins and the alarming/blocking behavior you are looking for.