For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

locki's avatar
locki
Icon for Nimbostratus rankNimbostratus
Jun 30, 2023

How to secure url on irule on F5?

I need secure one think and i dont know how to do it correctly and properly. We have this link on website for aplication: https://www.somewebsite.com/test/UI/Login?realm=external&goto=https://www.so...
devops
security
Paulius's avatar
Paulius
Icon for MVP rankMVP
Jun 30, 2023

locki I believe what you are looking for is dealing with URI::query which you can read up more at the following link.

https://clouddocs.f5.com/api/irules/URI__query.html

In addition I believe someone did something similar in the following link.

https://community.f5.com/t5/technical-forum/irule-to-block-uri-with-parameters-irrespective-of-uri-query/td-p/216167

Is the F5 working as your perimeter device and does it have WAF enabled on it? I think this situation might be better dealt with by using WAF rather than relying on a manually created and updated iRule to protect the entirety of your user base.

  • locki's avatar
    locki
    Icon for Nimbostratus rankNimbostratus
    Jun 30, 2023

    There is ASM on the box, on perimeter is FW then F5, I also think there must be better solution then some irule...

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Jul 03, 2023

      locki I defer to Daniel_Wolf comment which is a great option that seems like it would work for you.