For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Reza_76713's avatar
Reza_76713
Icon for Nimbostratus rankNimbostratus
Mar 17, 2009

bypass ASM based on protocol usage

Hey guys,

 

 

How can I bypass ASM?

 

I have a server pool reached via http and Https protocols.

 

I will to enable ASM on http request and disable ASM on Https request.

 

 

What is the best possible solution here?

 

 

Thx
app sec
BIG-IP Access Policy Manager (APM)
security

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Mar 17, 2009
    I think it would be simplest to configure two separate VIPs: one for HTTP with an ASM-enabled HTTP class and a second for HTTPS with no HTTP class. This would ensure that only HTTP requests are validated by ASM.

     

     

    Aaron