For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

paul_dawson_258's avatar
paul_dawson_258
Icon for Nimbostratus rankNimbostratus
Sep 19, 2016

ASM IP exclusion list

Hi,

 

I have about 25 IP addresses which I need added to the ASM which are our nexpose scanners. Is there a way to add these to all policies without adding one address at a time to one policy at a time?

 

ASM Advanced WAF
security

1 Reply

  • Tikka_Nagi_1315's avatar
    Tikka_Nagi_1315
    Historic F5 Account
    Sep 27, 2016

    It appears that maybe the only way to do this via gui since the IP Address Exceptions are per policy: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-2-0/2.html

     

    However, you should be able to script this via REST:

     

    POST to /mgmt/cm/asm/working-config/policies//whitelist-ips with body: { "name": "Any Name", "ipAddress": "x.x.x.x" }