For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JamesS_40157's avatar
JamesS_40157
Icon for Nimbostratus rankNimbostratus
Jan 03, 2012

Blocking a single IP in ASM - send to the blocking page

Hi all,     I can't for the life of me work out what I would have thought would be a simple thing to do in ASM.       What we would like to do is blacklist a single IP address (or potent...
app sec
BIG-IP Access Policy Manager (APM)
security
JamesS_40157's avatar
JamesS_40157
Icon for Nimbostratus rankNimbostratus
Jan 03, 2012
Would something like this work in the meantime? I realise it will basically allow anything through that isn't in the block list:

 

 

when HTTP_REQUEST {

 

if { [matchclass [IP::remote_addr] equals /Common/asmblockips] } {

 

 

ASM::enable

 

} else {

ASM::disable

 

}

 

}