Forum Discussion
maurox_59221
Jun 22, 2012Nimbostratus
Bypass ASM
Hi all,
I'm searching the best way to bypass the ASM (enabled only for the geoloaction block) for some specif IP adress.
I've tryed using a specific http profile , adding these IP to the list "Host List" and after I've associated this profile to a policy in transparent mode.After I've added (as the first , the deault profile -in "block mode" - is the secondary)this profile to the http class profile.
But it semms that this configuration doesn't work. My requests from the whitelisted IP are blocked.
Maybe someone has already implemented and tested an Irule for this?
best regards,
maurox
- Eric_St__JohnEmployeeYou can create a data group list called asm_whitelist with the IP addresses contained in it, and use the following iRule:
when HTTP_CLASS_SELECTED { ASM::enable if { [class match [IP::client_addr] equals asm_whitelist] } { ASM::disable } }
- maurox_59221NimbostratusEric,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects