IP Blocking

Enhance your application security by blocking intruders IPs. K2 will help uncover and block Attacker's IPs at your infrastructure perimeter.

Intruders IP Blocking with K2 Platform

In this section, we outline the steps to block Intruders IPs from attackers with K2 Platform.

Step 1 : Checkout Policy Page

Policy page keeps all the configuration related to vulnerability detection and runtime protection for your applications.

Policy | K2 Portal

Step 2 : Edit your default Policy under Policies View

Click on edit button on your default policy.

You will see three sections at the top Agent Config, Agent Policies and Global Policy Parameters.

Click on Agent Policy and head on to step 3.

Step 3 : Protection Mode : IP Blocking

K2 Portal Protection Mode Policy

Now we can see all the properties in Protection Mode.

In order to block malicious IPs,

• Enable Protection Mode.

• Enable IP Blocking - Enables IP based attack protection mode. Under IP Blocking go through policies and enable as per your requirements

  • Attacker IP blocking - Enables protection against known attacker IPs for a specific duration

  • IP detecting via XFF - Enables user IP detection via X-Forwarded-For

  • Timeout - Defines the duration to block the attacker IPs 2 minutes 2 hours 1 day forever 2 hours

What Next ?

Learn next about IP Blocking with vSRX and K2 Platform

Block IPs Via vSRX Firewall Integration