Access Control Based On IP for specific URL

I don't believe the 'forward' command is necessary. If you don't reject it then the F5 should process it normally.

 

 

It looks like you have the rule backwards. I think you're discarding when you want to allow, and allowing when you want to discard.

 

 

The IF statement will trigger if someone who is NOT authorized tries to access the secure path. In this case you want to reject them. The ELSE case will hit whenever the user is authorized OR they are trying to access a non-secure part of the site.

 

 

The iRule I suggested didn't have the ELSE part there, so the rule you have is doing the opposite of the one I wrote. Try switching back to the one I had and see if it works.