For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mo9823's avatar
Mo9823
Icon for Nimbostratus rankNimbostratus
Dec 01, 2019

block access to VS by IP

hello,

 

I had a request from our infosec team to block any request accessing the VS by the IP addresss, for example:

our website www.xyz.com , VS IP: 1.2.3.4

if some one try to access the website by typing http://1.2.3.4 it should blocked.

I found one voilation on ASM policy to block that, but I am getting blocking page with support ID.

we need to block it without any blocking page, the request should be dropped like "this page cannot be loaded"

 

any suggestions please?

 

application delivery
ASM Advanced WAF
BIG-IP
iRules

1 Reply

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    Dec 01, 2019

    You should look for the host header and action for this.

    when HTTP_REQUEST {
if {not(([string tolower [HTTP::host]]) equals "www.xyz.com")} {
log local0. "[HTTP::host] requested Invalid - Dropped"
reject
}
}