Security and Access Control

Security controls within the LB scope.

• How much security does the Load Balancer module provide on its own; when do I need a WAF?LB-13-001
• Can I block traffic from specific countries?LB-13-002
• Can I block specific IPs/CIDRs or allow only them?LB-13-003
• How do I attach WAF, L7 DDoS & Threat Protection and AGS to a vService?LB-13-004
• Can I block by ASN?LB-13-005
• Can I block known malicious IPs (IP Reputation / blacklist category)?LB-13-006
• How do I recognize and handle Tor exit nodes, VPN/proxy addresses and data center (cloud/hosting) IPs separately?LB-13-007
• Can I do rate limiting (X requests per second per IP)?LB-13-008
• How does the Quarantine Action work; how long is a client that exceeds the threshold blocked?LB-13-009
• How do I see the clients in quarantine?LB-13-010
• How do I detect bots; can I allow good bots (Googlebot etc.) and block bad ones?LB-13-011
• Can I verify humans with a CAPTCHA?LB-13-012
• Can I block requests that contain debug/test parameters?LB-13-013
• I am blocking legitimate users by mistake; how do I find out?LB-13-014
• Can I apply rate limiting based on a key such as an API key / token?LB-13-015
• Can I take automatic action when the number of requests / connections suddenly increases?LB-13-016
• Can I block large requests (e.g. above a certain size)?LB-13-017
• Can I look for and block specific content in the request body (JSON / XML / form)?LB-13-018
• Can I prevent sensitive data (credit card, national ID number) from leaking out in the response?LB-13-019
• How do I see how many times a client has failed Advanced CAPTCHA and how close it is to quarantine?LB-13-020
• How do I exempt specific IPs, networks or countries from L4 DDoS protection (Whitelist & Known Peers)?LB-13-021
• How do I limit the number of concurrent TCP connections from a single source in L4 DDoS; what does the Zombie TCP setting do?LB-13-022
• How do I see sources that were quarantined in the past by L4 DDoS and why (Quarantine History)?LB-13-023