For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

veredgf's avatar
veredgf
Icon for Nimbostratus rankNimbostratus
Sep 22, 2019

custom response per uri with jason code

Hi, One of the developers would like to have a Jason custom response for ASM blocking for all pages beginning with (not real page) \blabla\* He would like to put a simple code that will send the se...
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Sep 22, 2019

You can do this in an iRule triggered on 

when ASM_REQUEST_VIOLATION {
   ...
   if {[HTTP::uri starts_with "/blabla"} {
      HTTP::respond 500 content {{"error":"invalid character", errorCode: "1231231"} } Header {Content-Type} {application/json}
   }
   ...
}

Otherwise, you need to create a new ASM policy that sets the Violation response to an HTTP 500 response as required. Use a Local Traffic Policy to select between the two ASM policies based on the HTTP::uri.

  • veredgf's avatar
    veredgf
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2019

    Hi,

     

    Thanks for the response - question - if I want to give this response to *all* violations on said uri, then would it be better to set this with a traffic policy? Do I need to create three Virtual servers for this? i.e., one with the real vip and two that have a placeholder vip just for the sake of holding the policy? (I have this done on a different site where we differentiate based on host name via traffic policy).

     

    Thanks again,

     

    Vered

    • Simon_Blakely's avatar
      Simon_Blakely
      Icon for Employee rankEmployee
      Sep 23, 2019

      Yes, that's a good option as well.