Enabling attack list fetching from ABS
Steps
-
To enable ASE Security, run the following command:
/opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_firewall
-
To enable ASE to send API traffic information to ABS, run the following command:
/opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_abs
-
To enable ASE to fetch and block ABS detected attacks, run the following command:
/opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_abs_attack
Result:
After enabling automated attack blocking, ASE periodically fetches the attack list from ABS and blocks the identified connections.
-
To set the time interval at which ASE fetches the attack list from ABS, configure the
abs_attack_request_minuteparameter inase.conffileExample:
; This value determines how often ASE will query ABS. abs_attack_request_minutes=10