Discard or reject clientside connection from HTTP_RESPONSE event?

Hello,

I'm trying to discard or reject a clientside connection from the HTTP_RESPONSE event (if a specific header isn't found in the server response). That wasn't working, so I simplified the rule down to:

when HTTP_RESPONSE {
   clientside {reject}
}

When testing with CURL or a browser as a client, I see the BIG-IP send back a packet with an HTTP 200 response (the node response) and then reset the connection to the server and then the client in the next packets.

Is this expected behavior? Is there a way to not send back any response to the client and just reset the TCP connection?

I'm testing this on 9.2.3. I attached a tcpdump showing the HTTP 200 response to the client followed by a reset.

Thanks,

Aaron