For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aapazmino1986's avatar
Aapazmino1986
Icon for Altostratus rankAltostratus
Jun 07, 2022

Exception of user-agent in ASM

Hi F5ers, please maybe do you know how to do exceptions user-agent based?. I need to allow some user-agents to connect to my app. I review some KB but I cannot find this. Thanks.
security
USER-AGENT ASM
nikolay_dimitrov's avatar
nikolay_dimitrov
Ret. Employee
Jun 07, 2022

There is an irule example for stoping for URL and the same cane be done for the user-agent.

 

 

Disabling a violation for a URL using an iRule (f5.com)

when ASM_REQUEST_DONE {
if {[ASM::violation names] contains "VIOLATION_ILLEGAL_METHOD" and [HTTP::header "User-Agent"] contains "unsupoorted_browser"}
{
ASM::unblock
log local0. "ASM unblocking [HTTP::header "User-Agent"] "
}
}