For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dakritt_315479's avatar
dakritt_315479
Icon for Nimbostratus rankNimbostratus
Apr 06, 2018

ASM disallowed url and wildcard

Hello community!   I'm working on an asm policy to filter only /admin/* webpages. I want that users access the whole site except admin section.   The Big-IP version is 11.5.5.   I know how ...
ASM Advanced WAF
security
dakritt_315479's avatar
dakritt_315479
Icon for Nimbostratus rankNimbostratus
Apr 20, 2018

Hello iaine,

I have tried your solution and it works perfectly. I think it's better than using iRules and raising ASM violation.

To proceed :

  • create a custom signature (detailed here) Use 

    uricontent:"/admin"; nocase; objonly;
    to filter uri containing /admin

  • create a signature set (detailed here)

  • Create an ASM Policy

  • In Policy Settings-> Learning and blocking settings, select ASM policy and go to "Attack signatures" and add the signature set previously created.

With this solution, iRule and ASM raise violation are not necessary.