KB: 00001013

Securing the website from brute force attack

Problem Statement

The client requires to secure its website from brute force attack.

Solution

1. The above requirement can be achieved by enabling and deploying rate limit rules along with sending challenges for limiting brute force attack on the website. WAF will ensure that incoming requests are processed in the configured manner, hence genuine users can access the website even if the brute force attack is in play.

2. Go to Listener --> Profile --> Rules --> Rate Limit Rules

Various Actions that can be taken to rate limit