Filter by:
  • Solution
  • Technology

answers

F5 ASM Attack/Violation Notification by Mail

Updated 12/21/2012 • Originally posted on 21-Dec-2012 by SSHSSH 129

I want to send attack notification by Mail .

I know the Solution speaking about sending Notification  Mails by editing alert.conf file :

http://support.f5.com/kb/en-us/solutions/public/3000/600/sol3667.html

But the issue is that i want to send attack description ( for  example : dsallowed file type ,  or SQL Attack )

The below will send only  "Violation Detecetd " & will not mention violation details :

http://support.f5.com/kb/en-us/solutions/public/7000/700/sol7738.html

 

0
Rate this Question

Answers to this Question

3 Answers:

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Updated 23-Dec-2012 • Originally posted on 23-Dec-2012 by Ido Breger
Hi,
Have you thought about the risk of ASM DOS'ing your mail server under an attack?
Would love to know more on the use case you have for this request.
Kind Regards,
Ido
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Updated 24-Dec-2012 • Originally posted on 24-Dec-2012 by SSHSSH 129
Customer Just want to be notified by attacks instead of going through all ASM Logs fro illegal requests
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Updated 07-Jan-2013 • Originally posted on 07-Jan-2013 by Torti 717
Hi,
you can use a syslog server for sending mails. There you can configure all the things you want above.
regards
Comments on this Answer
Comment made 23-Dec-2013 by Interhost 18

Any chance do it in house?

0
Edit your comment
;