For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

patonbike_25784's avatar
patonbike_25784
Icon for Nimbostratus rankNimbostratus
Apr 28, 2018

How can I disallow a particular IP with ASM?

I'm viewing event logs and same IP is just hammering us. I just want to block it (temporarily would be ideal, too...) but "Disallow this geolocation" I believe will block the entire Country.  
application delivery
ASM Advanced WAF
boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 28, 2018

which version are you running?

 

with the newer ones check: Application Security : IP Addresses : IP Address Exceptions ›› New IP Address Exception... and set it to always block.

 

in the past ASM didnt do this easily, probably an iRule to block the IP is easier.

 

https://devcentral.f5.com/questions/can-i-block-an-ip-address

 

this has some suggestions to do it (partially) with ASM: https://devcentral.f5.com/questions/blocking-traffic-from-single-ip-with-block-page-on-asm