IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

ISAM 9.0.6 settings to avoid Slow HTTP Attacks

  • 1.  ISAM 9.0.6 settings to avoid Slow HTTP Attacks

    Posted 11/28/19 11:36 AM
    Hi, I'm tryin Web Reverse Proxy Rate Limiting policies on ISAM 9.0.6 to avoid Slow HTTP Attacks, I have tried some sample policies with several different settings given by some sources like: https://www.ibm.com/blogs/security-identity-access/web-reverse-proxy-rate-limiting/ or https://www.ibm.com/support/knowledgecenter/en/SSPREK_9.0.7/com.ibm.isam.doc/config/reference/ref_lim_post_req.html , however when I test with
    SlowHTTPTest from KALILinux Reverse Proxy still gets offline without giving service, Does anybody has done the same test? Do you have some suggestion? Thanks in advance, Greetings.

    ------------------------------
    David Vicenteño
    ------------------------------