-
Can't access GUI
I can access A10 CFW from CLI (admin/a10) but I can't access GUI (admin/a10) how can I do it for the GUI access? Interface Mangement IP address config finished. New create user account from CLI. New create user access web, access cli, access axapi (config from CLI) But I can't access GUI still now. Could you please help…
-
A10 3430 - UPGRADE FAILED - Incorrect software for the model
hello, I'm trying to upgrade ACO 4.1.4 GR1 P13 build 44 to ACO 4.1.4 GR1 P14 42_64 I have two versions: FTA and non_FTA but in all cases returns this error: ACOS(config)#$/outros/ACOS_non_FTA_4_1_4-GR1-P14_42.64.upgUser name []? Password []? Decrypt upgrade package ... ................. Done (0 minutes 18 seconds) Checking…
-
WAF URL Whitelist syntax
Hi All, I am trying to write an additional policy based on the default url whitelist in the WAF templates. However the whitelist keeps failing the check due to a syntax error, but I can not see where it is, and I can't find any documentation on the syntax for creating the files. What I have is the following: # This is a…
-
SCTP FW and RFC 5062
Hi all, A10 doc specifies about the SCTP FW, that “out-of-state packets and packets that fail packet anomaly checks per RFC 4960 are dropped.” But does anybody knows if it also remediates the vulnerabilities identified in RFC 5062 ? Thanks!
-
WAF bot_define
WAF feature block traffic then enable WAF ( Bot-Define): CEF:0|A10|TH1030S|4.1.1-P3|WAF4|bot-check|6|rt=Sep 15 2017 13:49:40 src=52.220.96.111 spt=62290 dst=10.0.0.220 dpt=443 dhost=uat.api-acledabank.com cs1=UAT-API-ACLEDA cs2=4ce1c66d87d59b2d act=deny cs3=active app=HTTPS requestMethod=POST cn1=0 request=/login…
-
IPv6 Rapid Deployment (6rd)
Hi All, Could anyone please help in setting up 6rd deployment in my lab using 6rd BR (A10 CFW) ACOS_vThunder_4_1_1-P9_105 (trial license) and for CE, using Cisco CSR1000v. Is it necessary to create or configure tunnel interface in CFW as BR Router? Setup: IPv6 Client <> 6rd CE (Cisco) <> IPv4 Core Network <> 6rd BR (A10…
-
A10 WAF fine-tuning
Hi, Is there any whitepapers, recommendation or detailed guide for A10 WAF fine-tuning? From my current knowledge...compared with F5 ASM, there's no case id for each blocking Also there's no easy/quick wizard for common webapp specs deployment (Language, OS, Database type etc) So how you guys do about it? Turn all feature…
-
WAF messages filter
Hi all, I've applied a WAF template on my vThunder (release 2.7.2-P10) to test the impact on my application. I also added a logging template to send messages to my log server and it is working fine. Is there a way to filter messages sent by the vThunder so only denied actions are logged? Thanks Luca
-
DNS Firewall
Hi Team: Can you please list down series of attack tools that we can use to test the DNS firewall of A10?
-
WAF URL Check not matching
I've setup a WAF template to try to only allow access to certain paths for a URL, and I think I've done this correctly, however I am having the connection reset by the WAF even when the path is the allowed one.show waf policyTotal WAF policy number: 15Max WAF policy file size: 256KName Syntax Template…
-
WAF Event Logging
Hello, About WAF Event Logging, is there a way to get the "host" or the full URL in the logs instead of only the destination IP address? Here is a sample log message: Dec 22 17:13:03 CEF:0|A10|AX3200|2.7.1|WAF|http-check|2|src=20.20.25.10 spt=32462 dst=20.20.25.130 dpt=80 req="GET /tours/index.html HTTP/1.1" 0…
-
WAF and AAM module available
Hello, I would like to known if SoftAX release of ACOS 2.7.1 P1 with the WAF and AAM features is already available. Regards, HA