A10 WAF fine-tuning

Community Forum Forums Thunder and AX Series General A10 WAF fine-tuning

This topic contains 2 replies, has 3 voices, and was last updated by avatar hkohn72 1 month ago.

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #14112
    avatar
    ins007
    Member

    Hi,

    Is there any whitepapers, recommendation or detailed guide for A10 WAF fine-tuning?

    From my current knowledge…compared with F5 ASM, there’s no case id for each blocking

    Also there’s no easy/quick wizard for common webapp specs deployment (Language, OS, Database type etc)

    So how you guys do about it? Turn all feature then check each blocked action while in passive mode?

    #15052
    avatar
    pinla11
    Member

    Hello,

    I have the same problem…did you found a solution?

    Thanks in advance,

    Laura

    #15082
    avatar
    hkohn72
    Member

    Hello ins007 and pinla11,

    a white-paper to optimize it is not existing until now.
    If you want to we can do a workshop for this topic.

    To make it clear in front the A10 ACOS has no database to store every bad request. We are logging this in a single syslog server externaly.

    Out of this syslog messages you see exactly in what topic and why this special request is blocked or will be blocked.
    I do it on a linux syslog host and filter with different commands like uniq, sort and so. In this way it took me far less time to optimize the WAF from A10 then i did the optimization at the F5 boxes.

    Let me know if i can support you on this topic.

    CU hkohn!

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.

Comments are closed.