For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

veredgf's avatar
veredgf
Icon for Nimbostratus rankNimbostratus
Jun 12, 2019

Disabling certain blocking policy element for specific URLs

We have a website where we need to bypass the illegal http response (500) for certain URLs.   The URLs are wildcards - i.e. \folder\folder\*   Any suggestions?  
ASM Advanced WAF
irule
iRules
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Jun 12, 2019

Not sure if this is the best solution, but this seems to work. Copy your policy and name it for example 'my_policy_allow_500'. In this policy, you will allow 500 as a valid response. So you have the policy 'my_policy' enabled on your virtual server. And select when needed the 'my_policy_allow_500' when needed.

when HTTP_REQUEST {
    if { [HTTP::uri] starts_with "/folder/folder/" } {
        ASM::enable /Common/my_policy_allow_500
    }
}

The disadvantage of this approach is that you have to maintain two policies. Hopefully someone comes up with a better solution 🙂

  • veredgf's avatar
    veredgf
    Icon for Nimbostratus rankNimbostratus
    Jun 13, 2019

    Hi, Thank you very much. This is indeed simple to create. I also agree that possibly there could be another solution, but if there isn't, this is a very useful solution.

     

    Thanks!