Manual Chapter : Configuring mobile security malware detection

Applies To:

Show Versions Show Versions

BIG-IP FPS

  • 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.0
Manual Chapter

Configuring mobile security malware detection

Before configuring mobile security malware detection, you should create a mobile security anti-fraud profile.
Configure mobile security malware detection if you want the system to check for malicious applications on mobile devices of end-users.
  1. On the Main tab, click
    Security
    Fraud Protection Service
    Anti-Fraud Profiles
    .
    The Anti-Fraud Profiles screen opens.
  2. In the Anti-Fraud Profiles screen, click the mobile security anti-fraud profile in the profiles list.
    The Anti-Fraud Profile Properties screen opens.
  3. In the Anti-Fraud Configuration area, click
    Mobile Security
    .
    The list of Mobile Security configuration options appear.
  4. In the list of Mobile Security configuration options, click
    Malware Detection
    .
    The Malware Detection configuration options appear.
  5. Select the
    Customize All
    check box.
  6. Ensure that the
    Enabled
    check box for
    Malware Detection
    is selected.
  7. Select the
    Enabled
    check box for the
    Run Behavior Analysis
    setting if you want the system to check for SMS grabbers.
    This check is based on suspicious behavior and characteristics of all applications on the customer's mobile device.
    BIG-IP version 15.0 can be used to detect other types of suspicious behavior based on settings provided by live update.
    • If you enable the
      Run Behavior Analysis
      setting, assign a value for the
      Behavior Analysis Score
      setting, or use the default score. If MobileSafe finds suspicious behavior and the score you assign here is above the alert threshold, an alert is sent to the FPS dashboard.
  8. Select the
    Enabled
    check box for the
    Check Generic Malware
    setting if you want the system to check for malware applications on mobile devices of end-users.
    The F5 malware database is used to check for this.
  9. Select the
    Enabled
    check box for the
    Check Custom Malware
    setting if you want to specify other malware applications that the system should include in its check, or if you want to whitelist applications that you don't want the system to check for.
    To specify other malware applications that the system should include in its check, click the
    Add
    button in the Malware List area and enter the data as described in the
    F5 MobileSafe Deployment and Configuration Guide
    .
    To whitelist applications that you don't want the system to check for, click the
    Add
    button in the Whitelisted Applications area enter the data as described in the
    F5 MobileSafe Deployment and Configuration Guide
    .
  10. Click
    Save
    .
    The anti-fraud profile is updated with the changes you made.