PingIntelligence

Enabling and disabling ASE attack detection

API Security Enforcer (ASE) supports real-time ASE attack detection and blocking for application programming interface (API) Deception. ASE blocks hackers that probe a decoy API and try to access a real business API. For more information, see API Deception Environment.

About this task

To enable and disable ASE attack detection:

Steps

  • To enable real-time ASE attack detection, run the enable_ase_detected_attack command on the ASE command-line interface (CLI).

    Example:

    /opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_ase_detected_attack

    Result:

    ASE detected attack is now enabled.

  • To disable real-time ASE detected attacks, run the disable_ase_detected_attack command on the ASE CLI.

    Example:

    /opt/pingidentity/ase/bin/cli.sh -u admin -p admin disable_ase_detected_attack
ASE detected attack is now disabled

    Result:

    Attacks are now deleted from the deny list.