To activate real-time API cybersecurity, you must enable the ASE firewall.

To enable or disable ASE's API cybersecurity feature:

  • To enable ASE's API cybersecurity:
    1. Run the enable_firewall command in the ASE command-line interface (CLI). 
      /opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_firewall
Firewall is now enabled
    2. After enabling API Security, run the status CLI command to verify cybersecurity is enabled. 
      /opt/pingidentity/ase/bin/cli.sh status
Ping Identity Inc., API Security Enforcer
status : started
http/ws : port 80
https/wss : port 443
firewall : enabled 
abs : disabled
abs attack : disabled
audit : enabled
ase detected attack : disabled
attack list memory : configured 128.00 MB, used 25.60 MB, free 102.40 MB
  • To disable ASE’s API cybersecurity:
    1. Run the disable_firewall CLI command. 
      /opt/pingidentity/ase/bin/cli.sh -u admin -p admin disable_firewall
Firewall is now disabled
    2. Run the status CLI command to verify that cybersecurity is disabled. 
      /opt/pingidentity/ase/bin/cli.sh status
Ping Identity Inc., API Security Enforcer
status : started
http/ws : port 80
https/wss : port 443
firewall : disabled 
abs : disabled
abs attack : disabled
audit : enabled
ase detected attack : disabled
attack list memory : configured 128.00 MB, used 25.60 MB, free 102.40 MB