Forum Discussion

Hussein_Ghazy's avatar
Hussein_Ghazy
Icon for Nimbostratus rankNimbostratus
May 20, 2016

Filter Specific ajax requests under a URL and grant access accordingly

Hi All,

 

I have special requirement for the ASM to check on "xyz" parameter and only grand access to the web server if the value of the parameter is mapmap or xy_get_data.

 

I created the parameter under parameters and linked it to the specific URL, enable blocking on the blocking page. However, i am not able to know where i can specify the values mapmap or xy_get_data.

 

Thanks in advance.

 

Regards

 

Hussein

 

ASM Advanced WAF
security

1 Reply

  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    May 20, 2016

    If you are interested in a general block unless the parameter matches one of these two strings, I would suggest looking at your Local Traffic Policy. You can configure a forwarding rule that looks for one of these two strings and if it doesn't find it discards the request. You can read about local traffic policies here: https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15085

     

    This is probably the easiest way to accomplish what you are trying to accomplish.