ASM Policy

Good call gersbah, in looking into the ASM-specific support for URL, regex is indeed not supported.

Brandon I removed my answer as a solution. That said, you might investigate using an iRule (shown below) or a local traffic policy to do the same...you could inspect the URL in the HTTP_REQUEST event and check your URL with regex, or simplify to just test your URL string with something like:

if { ( [string tolower [HTTP::uri]] eq "/abt/color/blue" ) || 
     ( [string tolower [HTTP::uri]] starts_with "/abt/color/blue/" ) } {
        # do allowed stuff here...
else { # take corrective action here, like raise an ASM violation }

Note that if you have other approved URLs with starting patterns, you'd need to handle that logic as well, this is specific to this use case.