Forum Discussion

locki's avatar
locki
Icon for Nimbostratus rankNimbostratus
Jun 30, 2023

How to secure url on irule on F5?

I need secure one think and i dont know how to do it correctly and properly. We have this link on website for aplication: https://www.somewebsite.com/test/UI/Login?realm=external&goto=https://www.so...
devops
security
Paulius's avatar
Paulius
Icon for MVP rankMVP
Jun 30, 2023

locki I believe what you are looking for is dealing with URI::query which you can read up more at the following link.

https://clouddocs.f5.com/api/irules/URI__query.html

In addition I believe someone did something similar in the following link.

https://community.f5.com/t5/technical-forum/irule-to-block-uri-with-parameters-irrespective-of-uri-query/td-p/216167

Is the F5 working as your perimeter device and does it have WAF enabled on it? I think this situation might be better dealt with by using WAF rather than relying on a manually created and updated iRule to protect the entirety of your user base.

  • locki's avatar
    locki
    Icon for Nimbostratus rankNimbostratus
    Jun 30, 2023

    There is ASM on the box, on perimeter is FW then F5, I also think there must be better solution then some irule...

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Jul 03, 2023

      locki I defer to Daniel_Wolf comment which is a great option that seems like it would work for you.