Manual : BIG-IP Application Security Manager: Implementations

Applies To:

  • BIG-IP ASM

    14.1.3, 14.1.2, 14.1.0

Preventing DoS Attacks on Applications

Using Shun with Layer 7 DoS

Mitigating Brute Force Attacks

Disallowing Application Use at Specific Geolocations

Monitoring ASM System Resources

Preventing Session Hijacking and Tracking User Sessions

Implementing Web Services Security

Creating Security Policies for AJAX Applications

Refining Security Policies with Learning

Configuring What Happens if a Request is Blocked

Configuring HTTP Headers that Require Special Treatment

Working with Security Policy Microservices

Configuring ASM with Local Traffic Policies

Synchronizing Application Security Configurations Across LANs

Securing FTP Traffic

Working with Passive Monitoring

Connection Mirroring with ASM

Viewing DoS Reports, Statistics, and Logs

Configuring Bot Defense

Setting Up IP Intelligence Blocking

Protecting Sensitive Data with Data Guard

Displaying Reports and Monitoring ASM

Mitigating Open Redirects

Fine-tuning Advanced XML Security Policy Settings

Securing Web Applications Created with Google Web Toolkit

Changing How a Security Policy is Built

Adding Entities to a Security Policy

Changing Security Policy Settings

Working with Violations

Automatically Synchronizing Application Security Configurations

Integrating ASM with Database Security Products

Securing SMTP Traffic

Updating Security Components

Configuring DoS Policy Switching

Creating Login Pages for Secure Application Access

Managing IP Address Exceptions

Masking Credit Card Numbers in Logs

Logging Application Security Events

Setting Up Cross-Domain Request Enforcement

Adding JSON Support to an Existing Security Policy

Adding Server Technologies to a Policy

Configuring Security Policy Blocking

Securing Applications That Use WebSocket

Configuring General ASM System Options

Maintaining Security Policies

Manually Synchronizing Application Security Configurations

Integrating ASM and APM with Database Security Products

Working with Anti-Bot Mobile Application SDK

Legal Notices