For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Check1t_282465's avatar
Check1t_282465
Icon for Nimbostratus rankNimbostratus
Dec 13, 2017

ASM Policy Allow traversal detection evasion only for specific URL

Our application is flagging legitimate requests for directory traversals. Learning option is to allow for application. Is it possible to allow for just one URL? For example, if I were to create a ...
ASM Advanced WAF
security
Check1t_282465's avatar
Check1t_282465
Icon for Nimbostratus rankNimbostratus
Jan 18, 2018

Sorry, hopefully last question. Could I use either via LTM iRule or Policy a method of disabling ASM when a specific URI (/example.jpg) is invoked? I tried irules using asm::enable/disable and HTTP_CLASS_SELECTED / HTTP::path commands as well as HTTP_REQUEST / HTTP::uri commands, but both failed.

 

PS - does the ACCESS::enable/disable command only work with APM and not ASM?

 

Thanks again.