For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Karthik_Krishn1's avatar
Karthik_Krishn1
Icon for Cirrostratus rankCirrostratus
Feb 17, 2016

Block keywords

Hello,   I am looking for a way to block access based on the presence of certain keywords contained within the URL. For eg:   GET /ctc/servlet/com.sap.ctc.util.ConfigServlet?param=com.sap.ctc.u...
iRules
LTM
security
Arie's avatar
Arie
Icon for Altostratus rankAltostratus
Feb 17, 2016

This could be tricky, as you would have to check for valid variations (e.g. encoded) as well. A simple string-comparison would still leave room for attackers.

 

Would you happen to have a license for ASM? That would be the best way to cover the variations an attacker would use.

 

Another option would be to implement some kind of authentication mechanism.