Forum Discussion
ASM allow specific url from outside country of geolocation ON
There is no procedure like "ASM::geo_disable" in current BIG-IP ASM implementations. Best way to handle this would be to create a cloned security policy with geolocation enforcement changed according the requirement and use that with the requests to specific URL.
Example:
when HTTP_REQUEST {
if { [string tolower [HTTP::path]] eq "/your-specific-url" } {
ASM::enable /Common/policy_without_geolocation
}
}
Alternatively, you can use an ltm traffic policy to achieve the same.
Example:
If you plan to use this:
You will first need to disable the application security policy from the virtual server:security > policies tab as we will be manipulating security policy manually using an ltm traffic policy later. This will also remove the automatically created asm_auto ltm traffic policy from the virtual server.
Once the newly created ltm policy with asm manipulation attached to the virtual server, if you come back to this section, it will reflect here.
Always try to use ltm traffic policies rather than an iRule whenever possible as iRules consume more resources. Hope this helps.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com