block url at root level

Can you or a member of your team modify the permissions to the root level to deny access, rather than doing it at the F5 level as a band aide ?

You can apply an iRule that 302 redirects users to a specific URI, on the VS and if it does not "start_with" the URI, then redirect them to correct one.

At least that is my thoughts on an iRule ha!

Yes, this is easily done with ASM - flag a parameter as mandatory, disallow empty value and make sure you are blocking on relevant violations:

• Illegal number of mandatory parameters

   

• Illegal empty parameter value

   

• Illegal parameter data type
• Illegal parameter numeric value