F5-ASM-AdvWAF-RDP (Rapid Deloym

The first strategy is RDP. Don't ask so much about why, it is personal experience.

All subsequent strategies are based on this policy.

2Gore RDP includes Xiasu strategy, and RDP strategy conforms to PCI standard (this is generally not popular in China, but many domestic standards are copied from this standard, so it is OK to deal with some audit strategies)

3. Individuals establish the first strategy habit as follows:

Version: V13.1.1.5

4, pay attention:

Although we chose block, there will be another place with staging, as long as there is staging, even if block is opened, it will not be blocked (I only found one place, and don't be surprised if there is any other place, after all, this is F5).

Staging will talk about it separately later, and it is useful to do fine strategy step by step.

This is a place where staging will be locked up alone.

5. Associate log, test our log all requests, produce log illegal, and send it to external log

6, the first block when touching the law

RDP only supports three http method types of get,post,head by default. Use Fiddle to request with put, and watch log

One of the reasons for block is the put request method.

Fiddle is non-browser, so call the police.