Forum Discussion

ErkkiS_295148's avatar
ErkkiS_295148
Icon for Cirrus rankCirrus
Apr 28, 2017

Different response for violations

Hello!   I created a redirection for externals (by whitelisting the internal range to bypass ASM) when stumbled upon Illegal URL and under custom block page redirected people to the correct one. ...
application delivery
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
May 23, 2017

Redirection based on source IP address is best done on LTM not ASM using Local Traffic Policy or an iRule.

 

ASM Blocking page should really be used for genuine security policy violations, not for redirecting users to a different page.

 

There are lots of sample iRules on DevCentral - just search for "source ip" and "redirect". Local Traffic policy config is more or less user-friendly and the guide is available here:

 

https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/local-traffic-policies-getting-started-12-1-0/1.html