Skip to content

Commit 5490fcb

Browse files
authored
Update configuration.md (#152)
1 parent 2716859 commit 5490fcb

File tree

1 file changed

+0
-61
lines changed

1 file changed

+0
-61
lines changed

content/nap-waf/v4/configuration-guide/configuration.md

Lines changed: 0 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -700,67 +700,6 @@ if failed logins reached a maximum threshold.
700700
}
701701

702702
```
703-
### brute-force-attack-preventions fields description
704-
705-
bruteForceProtectionForAllLoginPages:
706-
When enabled, enables Brute Force Protection for all configured login URLs.
707-
When disabled, only brute force configurations for specific login pages are applied in case they exist.
708-
709-
detectionCriteria:
710-
Specifies configuration for detecting distributed brute force attacks.
711-
action:
712-
Specifies action that is applied when the defined thresholds ( failedLoginAttemptsRateReached) is reached.
713-
- **alarm**: The system will log the login attempt.
714-
715-
failedLoginAttemptsRateReached:
716-
After configured threshold (number of failed login attempts within measurementPeriod) defined
717-
action will be applied for the next login attempt.
718-
719-
loginAttemptsFromTheSameIp:
720-
Specifies configuration for detecting brute force attacks from IP Address.
721-
722-
action:
723-
Specifies action that is applied when defined threshold is reached.
724-
- **alarm**: The system will log the login attempt.
725-
- **alarm-and-blocking-page**: The system will log the login attempt, block the request and send the Blocking page.
726-
- **alarm-and-drop**: The system will log the login attempt and reset the TCP connection.
727-
728-
enabled:
729-
When enabled, the system counts failed login attempts from IP Address.
730-
731-
threshold:
732-
After configured threshold (number of failed login attempts from IP Address) defined
733-
action will be applied for the next login attempt.
734-
735-
loginAttemptsFromTheSameUser:
736-
Specifies configuration for detecting brute force attacks for Username.
737-
738-
action:
739-
Specifies action that is applied when defined threshold is reached.
740-
- **alarm**: The system will log the login attempt.
741-
742-
enabled:
743-
When enabled, the system counts failed login attempts for each Username.
744-
745-
threshold:
746-
After configured threshold (number of failed login attempts for each Username) defined
747-
action will be applied for the next login attempt.
748-
749-
measurementPeriod:
750-
Defines detection period (measured in seconds) for distributed brute force attacks.
751-
752-
preventionDuration:
753-
Defines prevention period (measured in seconds) for distributed brute force attacks.
754-
755-
reEnableLoginAfter:
756-
Defines prevention period (measured in seconds) for source-based brute force attacks.
757-
758-
sourceBasedProtectionDetectionPeriod:
759-
Defines detection period (measured in seconds) for source-based brute force attacks.
760-
761-
url:
762-
Reference to the URL used in login URL configuration (policy/login-pages).
763-
This login URL is protected by Brute Force Protection feature.
764703

765704
## Custom Dimensions Log Entries
766705

0 commit comments

Comments
 (0)