Manual Chapter : Automatically tracking a user's web activity

Applies To:

  • BIG-IP FPS

    21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.0

Automatically tracking a user's web activity

Automatically track a user’s web activity if there are certain alert types for which there is a possibility of a fraud attack and automated tracking of the user’s web activity is appropriate.

  1. On the Main tab, click Security > Fraud Protection Service > Anti-Fraud Profiles.

    The Anti-Fraud Profiles screen opens.

  2. From the list of profiles, select the relevant profile.

    The Anti-Fraud Profile Properties screen opens.

  3. In the Anti-Fraud Configuration area, click Rules.

    A list of alert types appears.

  4. In the list of alert types, click the alert type for which you want to define a system response.

    The alert type appears in the Rules area.

  5. In the Rules area, select the Enabled check box next to the alert type.

  6. If the alert type you selected is generated on the client-side by JavaScript, in the Minimum score to perform action field type a score between 0-100.

    Note: The Minimum score to perform action field only appears for alert types that are generated on the client-side by JavaScript.

  7. From the Action list, select Turn on Verbose Activity Logging.

    The Enforcement Policy and Duration fields appear.

  8. In the Enforcement Policy field, select either Limited Time or Unlimited Time.

  9. If you selected Limited Time in the previous step, in the Duration field, type a time limit (in minutes).

  10. Click Save.

    The rule is now active.

The next time the BIG-IP sends an alert of the type selected at step 4 and the user successfully logs in to a protected page in this profile, the user is added to the Turn on Verbose Activity Logging list in the User Enforcement area of the Anti-Fraud Profile Properties screen. And starting from the next successful login the BIG-IP system tracks the user’s activity on the website. A log of the user’s activity is also sent to the FPS Dashboard.

Note: If the user is already in the list of users whose activity is tracked in the User Enforcement list, the user is not added a second time.