Forum Discussion

N_65943's avatar
N_65943
Icon for Nimbostratus rankNimbostratus
Feb 07, 2009

Block usernames and IP addresses

Hi

 

 

In ASM... Does anyone know if it is possible to block sessions by user name and/or IP address to a Web application?

 

 

For example, blocking restricted user names or know IP's...

 

 

 

app sec
BIG-IP Access Policy Manager (APM)
security
  • Tom_Spector_50's avatar
    Tom_Spector_50
    Historic F5 Account
    Feb 10, 2009
    Some options:

     

    - Create a signature catching the bad values for the parameter username

     

    - Use an iRule to identify the problematic source IP and drop the request (or do with it as you wish)

     

    Thanks,

     

     

    Tom.