Forum Discussion

Atou's avatar
Atou
Icon for Nimbostratus rankNimbostratus
Apr 15, 2009

blocking different URI but allowing al the other ones

Hi,     I'm new to F5 and have a problem.   I want to disallow some URI but allow everything else, is this possible to do with the ASM?     For examples:     Deny...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 16, 2009
Hi Anthony,

 

 

Sure this is possible. Assuming you are on 9.4.2 or higher, you can define a no_ext object type, a wildcard object and then use attack signatures to dictate that the URI cannot match /me/private/* or /company/private/*

 

 

You can check the ASM Config Guide for your version for details on these steps.

 

 

Aaron