The strength of ASM lies in its policy engine, which can utilize two distinct security models:
# List ASM policies tmsh list security asm policy
| Component | Description | |-----------|-------------| | | Allowed extensions (.html, .php, etc.) | | URLs | Explicit or wildcard URLs | | Parameters | Data types, allowed values, lengths | | Cookies | Required/optional, expected values | | Attack signatures | Predefined or custom signatures | | IP intelligence | Geo-filtering, known malicious IPs |
F5 Asm -
The strength of ASM lies in its policy engine, which can utilize two distinct security models:
# List ASM policies tmsh list security asm policy f5 asm
| Component | Description | |-----------|-------------| | | Allowed extensions (.html, .php, etc.) | | URLs | Explicit or wildcard URLs | | Parameters | Data types, allowed values, lengths | | Cookies | Required/optional, expected values | | Attack signatures | Predefined or custom signatures | | IP intelligence | Geo-filtering, known malicious IPs | The strength of ASM lies in its policy