Forum Discussion

boneyard_11131's avatar
boneyard_11131
Icon for Nimbostratus rankNimbostratus
Jun 12, 2015

ASM to drop request not block

i believe it isn't possible but just checking to be really sure :)   is it possible with just the normal ASM functionality to drop request? so not the block page or redirect or ...   i know it ...
design
security
Pascal_Tene_910's avatar
Pascal_Tene_910
Historic F5 Account
Jun 12, 2015

Since ASM works at layer 7, it probably makes more sens to configure a predictable behavior when a violation occurs, rather than just dropping the connection which might lead to a hanging behavior from the client. https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/25.html?sr=46193579 shows how to configure redirect or custom blocking page.

 

However, If doping is really what is wanted, then iRule is a good option.