Note:

Real-time API cybersecurity is activated only when ASE firewall is enabled. For more information on enabling the ASE firewall, see CLI for inline ASE.

  • To enable API cybersecurity:
    1. Run the enable_firewall command in the command-line interface (CLI): 
      /opt/pingidentity/ase/bin/cli.sh -u admin -p admin enable_firewall
Firewall is now enabled
    2. To verify that cybersecurity is enabled, run the status command: 
      /opt/pingidentity/ase/bin/cli.sh status
Ping Identity Inc., API Security Enforcer
status : started
http/ws : port 80
https/wss : port 443
firewall : enabled 
abs : disabled
abs attack : disabled
audit : enabled
ase detected attack : disabled
attack list memory : configured 128.00 MB, used 25.60 MB, free 102.40 MB
  • To disable API cybersecurity:
    1. Run the disable_firewall command: 
      /opt/pingidentity/ase/bin/cli.sh -u admin -p admin disable_firewall
Firewall is now disabled
    2. To verify that cybersecurity is enabled, run the status command: 
      /opt/pingidentity/ase/bin/cli.sh status 
Ping Identity Inc., API Security Enforcer 
status : started 
http/ws : port 80 
https/wss : port 443 
firewall : disabled 
abs : disabled 
abs attack : disabled 
audit : enabled 
ase detected attack : disabled 
attack list memory : configured 128.00 MB, used 25.60 MB, free 102.40 MB