Forum Discussion

daboochmeister's avatar
daboochmeister
Icon for Cirrus rankCirrus
Aug 22, 2018

Apply ASM DOS profile to a single virtual server? Different DOS thresholds to different virtual servers?

Env: LTM 11.5.2 on hardware appliances (4200, 2000)

 

Maybe I'm just missing it and this is a stupid question - but is there a way to apply Denial of Service protections to a single virtual server's traffic in the ASM module? Or different thresholds for different virtual servers?

 

Everything I'm reading seems to be implying that once you set a profile it applies to ALL traffic to the LTM. Is that correct?

 

Thanks!

 

application delivery
ASM Advanced WAF
ddos
dos
security

1 Reply

Sort By
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Aug 23, 2018

    Hi,

     

    once you create your profile ddos, you can assign it to one or more VS. So you ddos profil does not apply to all traffic to the LTM but only on the service on which you apply it.

     

    So once you create your profil ddos go to:

     

    • Local Traffic ›› Virtual Servers : Virtual Server List ›› click on the vs where you want to apply the ddos protection (vs-name)
    • Click on security tab then select your ddos profil on "DoS Protection Profile".

    To sum up you can have only one ddos profil by VS, you can create multiple ddos profile and you can attached your ddos profil on VS that you want.

     

    Additional Point you can also suscribe to silverline (based cloud) that can protect you agains standard ddos and volutmetric ddos. for more info:

     

    https://www.youtube.com/watch?v=2Uj0TMzDTS8

     

    hope it's clear.

     

    regards