Forum Discussion

Daniel_Varela's avatar
Jul 26, 2017

Session awareness block all not working

Hi everybody,

 

Working with ASM 12.1.2. I am testing session awareness, expecificaly block all option from the event log. The behaviour I see is quite estrange. First, my policy is in blocking mode, my blocking settings for access from disallowed User/Session/IP. I got nothing in staging. Session awaraness is enabled but only at session id level.

 

My test is access my protected application, go to event logs and select log all and block all for an specific session. When I try to access again I am not being blocked. If I go to Resporting > Application > Session Tracking Status I can see my sessionid as block all and log all.

 

Any though of why I am not being blocked?

 

No RepliesBe the first to reply