Support a new action for malicious user mitigation methods
We currently support CAPTCHA, Block and JS challenge. If we can support 'Header Inserion' as a new action for the malicious user detection feature, customers can consume that the suspicion score in other security devices.
-
Jin Won LEE
- May 22 2023
Related ideas
Maybe check with F5 sales if authentication intelligence will do this for you as it inserts http header flags for the origin showing if the user is bad or good.
https://docs.cloud.f5.com/docs/services/mesh/authentication-intelligence
Attachments Open full size
Example of use case « fake quote »: if a Malicious User is detected during the request, a fake page is returned by backend server.
Attachments Open full size
there are malicious user security events which can be extracted using API or via global log receiver. The scores and user information is present in those logs
Attachments Open full size