For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sameer_Srivasta's avatar
Sameer_Srivasta
Icon for Nimbostratus rankNimbostratus
Jun 18, 2018

ASM: block a specific URL

Hi i want to block a specific URL, example: xzy.abc.com/aaa/bbb/ddd/* and allow every thing else like xyz.abc.com/* through ASM, i have tried disallowing the URL(Security>Application Security>URLs>Disallow URLs) but did not work. Please help.

 

ASM Advanced WAF
iRules
security

5 Replies

  • Anesh's avatar
    Anesh
    Icon for Cirrostratus rankCirrostratus
    Jun 18, 2018

    Did you check your Policy Blocking Settings? Does it have Block checkbox selected for "Illegal URL"? If not, go ahead and select it, apply the policy changes, and you're done.

     

  • Erik_Novak's avatar
    Erik_Novak
    Icon for Employee rankEmployee
    Jun 18, 2018

    Go to Security ›› Application Security : URLs : Disallowed URLs : Disallowed HTTP URLs and add the specific URI you wish to block.

     

  • Anesh's avatar
    Anesh
    Icon for Cirrostratus rankCirrostratus
    Jun 18, 2018

    try

    create a custom violation named as Illegal_Url

    when HTTP_REQUEST {
  set reqBlock 0
  if { ([[string tolower [HTTP::uri]] contains "/aaa/bbb/ddd/")} {
  set reqBlock 1
  }
}

when ASM_REQUEST_DONE {
  if { $reqBlock == 1} {
    ASM::raise Illegal_Url
  }
}