For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Oct 13, 2015

    ASM is not an IP-based firewall. Within ASM you can specify a set of trusted IP addresses in which case the signature-checks will not be executed. You can not define a list of blacklisted IP addresses as requested.

    You have two sensible options, you should use AFM or LTM module.

    In case of a LTM solution, I'd recommend applying this iRule to the Virtual Server where you want a specific IP address to be rejected.

    irule_ip_restrictions

    when CLIENT_ACCEPTED {
    if { [IP::addr [IP::client_addr] equals 1.1.1.1/32] } {
      log local0. "Rejected Access, IP address: [IP::client_addr]"
      reject
    } else {
      log local0. "Permitted Access, IP address: [IP::client_addr]"
    } 
}