Lab 2 - Testing and Visibility

1. First lets try and attack out application with an XSS attack using the bellow URL. Th attack will be blocked and a support ID will be provided. Save the support ID as it will be used in the next step.

   http://arcadia-ce-k8s-$$makeId$$.workshop.emea.f5se.com/?a=%3Cscript%3Ealert(%27xss%27)

2. Let’s look at the blocked attack

   Go to Web App & API Protection -> Dashboards -> Security Dashboard -> Scrool down to the Load Balancers section and click on arcadia-ce-k8s-lb -> Security Analytics

   Here you will me able to see all blocked attacks.

3. If you want to filter a specific request that has been blocked

1. On the current page -> Add Filter -> Enter req_id -> In -> Enter the previous support ID -> In case nothing is shown click on the Refresh button

   Click the down arrow and you will see all the request details and why it has been blocked