For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JamesS_40157's avatar
JamesS_40157
Icon for Nimbostratus rankNimbostratus
Jan 03, 2012

Blocking a single IP in ASM - send to the blocking page

Hi all,     I can't for the life of me work out what I would have thought would be a simple thing to do in ASM.       What we would like to do is blacklist a single IP address (or potent...
app sec
BIG-IP Access Policy Manager (APM)
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Jan 03, 2012
The whitelist is indeed where you say it is, but there is also an "ignored IP addresses" section which i would assume just disables ASM for that particular IP.i never tested it but thinking it is for learning suggestion only.

 

 

Ignored IP addresses

 

You can now configure IP addresses that the system should ignore. The system ignores traffic sent from these IP addresses, and does not generate Learning suggestions from traffic sent from these IP addresses. Configuring ignored IP addresses is especially useful when performing penetration testing on the web application. To add an ignored IP address, from the Configuration utility, navigate to Application Security » Manual Policy Building » Ignored IPs.

 

 

Release Note: BIG-IP ASM version 10.2.0

 

http://support.f5.com/kb/en-us/products/big-ip_asm/releasenotes/product/relnotes_asm_10_2_0.html