App Sec: detect origin traffic

[erh_inetum]

Hi,

Is App Sec able to detect origin traffic automatically ?

We've seen in Threads&Exploits app lots of requests detected as attack but several of them come from our Openshifts IP origin. We've included these IP origin in the allowlist but we reckon if Dynatrace can do it or if there is anyway to configure it.

Thanks in advance.

Regards,

Elena.

[dania]

Hi,
Dynatrace does not automatically detect origin traffic, so the way you configured an IP in the allowlist is correct. This approach is used to avoid disabling alerts for potential attacks, the best practice is always to use the allowlist. Otherwise, Dynatrace may detect it as a real attack