For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ashish_205344's avatar
Ashish_205344
Icon for Nimbostratus rankNimbostratus
Aug 17, 2017

Does F5 supports absolute URL's in Allowed URL for ASM Policies.

Hi Experts, Does F5 supports absolute URL's in Allowed URL for ASM Policies.   Scenario: The client sends a request to VS https://test.business.com/service/JIT/v2_12/CAU , Irule applied to VS ...
application delivery
ASM Advanced WAF
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 17, 2017

Hi,

 

  1. URI may not contain full URL but only
  2. Hostname is included in Host header of HTTP request. if you want to change both URI and Host, change both values.
  3. ASM URL is not full URL( like in browser), LTM URI (including query string) but Path part of the URI.