For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

maurox_59221's avatar
maurox_59221
Icon for Nimbostratus rankNimbostratus
Jun 22, 2012

Bypass ASM

Hi all,   I'm searching the best way to bypass the ASM (enabled only for the geoloaction block) for some specif IP adress.   I've tryed using a specific http profile , adding these IP to the lis...
application delivery
dev
devops
iRules
Eric_St__John's avatar
Eric_St__John
Icon for Employee rankEmployee
Jun 22, 2012
You can create a data group list called asm_whitelist with the IP addresses contained in it, and use the following iRule: 


when HTTP_CLASS_SELECTED {
  ASM::enable
  if { [class match [IP::client_addr] equals asm_whitelist] } {
    ASM::disable
  }
}

Regards,

Eric