Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Wire's avatar
Wire
Apr 12, 2011

Can you restrict a file type to a URL in ASM?

Hi,     Is there a way without an iRule to restrict certain file types to certain URLs in ASM v 10.2.0 HF1?     I want to restrict requests for static content such as css, png, jpg, pdf to...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 12, 2011
Actually, the regex for 1 will block everything else that's not in images. I need to work on that a bit :). The concept is that you want to build a regex which matches a string starting with /images/ that does not end with a static filetype. Once you figure that out, you can create an attack signature which is applied to URIs. I'll try to test this more to get it working. Else, if you figure it out, please reply back.

 

 

Thanks, Aaron