ASM disallowed url and wildcard

Hello,

Your bahaviour is normal the functionnality "Disallowed URLs" is availlable only for explicit URL and not wildcard. So you can't set a wildcar URL:

URL (Explicit only) Example: /index.html

that's why it's working (a blockage took place) when you enter "https://www.mysite.com/admin/*" only.

I advise you to process your needs trough an irule. As i told you it's more simple and you can easly log all attemtps...

when HTTP_REQUEST {

set uri [string tolower [HTTP::uri] ]

 if { $uri starts_with "/admin" } { 
  log local0. "rejected request $uri for client [IP::client_addr]"
  reject
 }
}