For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sharath413's avatar
Sharath413
Icon for Nimbostratus rankNimbostratus
Jan 15, 2021

Allow Specific URLs to Internal IPs only

I have a requirement where the urls on a website must be accessible from Internal networks only. what is the easiest way to do this without irules? can I put in an IP address exception for private I...
ASM Advanced WAF
security
Lidev's avatar
Lidev
Icon for Nacreous rankNacreous
Jan 15, 2021

Hi Sarath413,

Does this concern all URLs ? if it is that configure the Virtual Server on internal VLAN only.

  • Sharath413's avatar
    Sharath413
    Icon for Nimbostratus rankNimbostratus
    Jan 15, 2021

     Thanks for the response. No, we want to allow few URLs externally and all URLs internally.

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      Jan 15, 2021

      you can try to set this up :

      1 - VS1 /Virtual Server exposed on internal VLAN without URL restrictions

      2- VS2 /Virtual Server exposed on external VLAN (with same pool members VS1-) and add the URLs you want blocked in Disallowed URLs List.

    • Sharath413's avatar
      Sharath413
      Icon for Nimbostratus rankNimbostratus
      Jan 15, 2021

       Sorry for the dumb question as I'm new to F5. Are external and Internal VLANs predefined? Mine is a one-arm deployment.

    • Lidev's avatar
      Lidev
      Icon for Nacreous rankNacreous
      Jan 15, 2021

      In one-arm , you cannot build the above configuration because you are only one VLAN/interface.