Forum Discussion
eagertolearn
Nimbostratus
NimbostratusF5 ASM User Agent handling
Hello Experts,
How to allow user-agents (Example : mogilla, ucf, any custom user agent, android browser) on F5 ASM if it is blocked by ASM. We checked some articles where it is suggested to block the user agent via iRule. but in our case we want to control the same through ASM itself.
Rgds
DanSkowCirrus
Hello,
The options are:
- iRule to drop requests. If you want to keep track of how many requests are dropped by the iRule, you can create a Statistics profile that increments by 1 every time the iRule event is triggered. I can post more details about this if you want, but I do this for a different situation and have a cron job that logs the amount of hits each day, then resets the counter.
- Create a custom ASM Attack Signature for "Matched Element Header, Matched Criteria <custom user agent>"
- Create a custom Bot Signature for "User Agent contains <custom user agent>"
Whatever option you choose, make sure you test it in a dev environment first, or an attack signature set that is only set to alarm.
eagertolearnHi All,
Requesting If anyone can reply.
- eagertolearn
Thanks Dan