For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brad_53264's avatar
Brad_53264
Icon for Nimbostratus rankNimbostratus
Nov 01, 2008

ASM custom blocking response & iRules

I am trying to write an iRule to do search and replace logic on the body of a custom blocking response.     When I add headers to the custom blocking response within ASM I do not see the...
app sec
BIG-IP Access Policy Manager (APM)
security
AaronJB's avatar
AaronJB
Ret. Employee
Nov 03, 2008
Unfortunately the HTTP_RESPONSE event fires before ASM has made any modifications to (or replacement of) the response received from the node, and the same is true for the blocking response page. In essence you are seeing the embryonic blocking page before it has actually been constructed by the ASM.

 

 

At present there are no plans to extend the iRules functionality - for example adding an HTTP_RESPONSE_SEND event to allow manipulation of the response before it leaves TMM (after it has passed through ASM) - but as Aaron says above, you can use v9.4's VIP-targetting-VIP functionality to achieve the same aim.

 

 

 

Thanks,

 

 

Aaron