Forum Discussion

Atou's avatar
Atou
Icon for Nimbostratus rankNimbostratus
Apr 15, 2009

blocking different URI but allowing al the other ones

Hi,

 

 

I'm new to F5 and have a problem.

 

I want to disallow some URI but allow everything else, is this possible to do with the ASM?

 

 

For examples:

 

 

Deny /me/private/*

 

Deny /company/private/*

 

Permit *

 

 

I this possible with ASM (currently running version 9.4.5) or do I need to do some work arround with iRules?

 

 

Can somebody help me out?

 

 

Kind regards,

 

 

Anthony
app sec
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Apr 16, 2009
    Hi Anthony,

     

     

    Sure this is possible. Assuming you are on 9.4.2 or higher, you can define a no_ext object type, a wildcard object and then use attack signatures to dictate that the URI cannot match /me/private/* or /company/private/*

     

     

    You can check the ASM Config Guide for your version for details on these steps.

     

     

    Aaron
  • Tom_Spector_50's avatar
    Tom_Spector_50
    Historic F5 Account
    Apr 16, 2009
    You can also use the http class mechanism to redirect requests to these URL's back to the homepage (make sure they are evaluated first)

     

     

    Thanks,

     

    Tom.