Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

F5 ASM Attack/Violation Notification by Mail

I want to send attack notification by Mail .

I know the Solution speaking about sending Notification  Mails by editing alert.conf file :

http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html

But the issue is that i want to send attack description ( for  example : dsallowed file type ,  or SQL Attack )

The below will send only  "Violation Detecetd " & will not mention violation details :

http://support.f5.com/kb/en-us/solutions/public/7000/700/sol7738.html

 

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi,
Have you thought about the risk of ASM DOS'ing your mail server under an attack?
Would love to know more on the use case you have for this request.
Kind Regards,
Ido
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Customer Just want to be notified by attacks instead of going through all ASM Logs fro illegal requests
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi,
you can use a syslog server for sending mails. There you can configure all the things you want above.
regards
0
Comments on this Answer
Comment made 23-Dec-2013 by Interhost 18
Any chance do it in house?
0