For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Reza_76713's avatar
Reza_76713
Icon for Nimbostratus rankNimbostratus
Mar 17, 2009

bypass ASM based on protocol usage

Hey guys,     How can I bypass ASM?   I have a server pool reached via http and Https protocols.   I will to enable ASM on http request and disable ASM on Https request.   ...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Mar 17, 2009
I think it would be simplest to configure two separate VIPs: one for HTTP with an ASM-enabled HTTP class and a second for HTTPS with no HTTP class. This would ensure that only HTTP requests are validated by ASM.

 

 

Aaron