For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
Oct 09, 2013

ASM::disable doesn't work

Hi all, at the moment I'm a little bit embarrassed about disabling ASM from an irule. My intent by this irule is to bypass ASM for specific pathes (/test1/ and /test2/) for specified IP addresses (...
application delivery
devops
iRules
security
Philipp_Stadler's avatar
Philipp_Stadler
Icon for Nimbostratus rankNimbostratus
Oct 09, 2013

that's fine - but it shouldn't make any difference, because the line if's, datagroups, and so on work fine, I got the log messages around the ASM::disable statement.

 

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Oct 09, 2013
'HTTP::class asm' should return 1 if a class has been selected, which it certainly has because you're inside of 'when HTTP_CLASS_SELECTED'. This event wouldn't fire if an HTTP class hadn't been selected. Is ASM incorrectly blocking traffic? Are you seeing some log messages that ASM is firing on these URIs that you don't want it to?