Forum Discussion

locki's avatar
locki
Icon for Nimbostratus rankNimbostratus
Jun 30, 2023

How to secure url on irule on F5?

I need secure one think and i dont know how to do it correctly and properly. We have this link on website for aplication: https://www.somewebsite.com/test/UI/Login?realm=external&goto=https://www.so...
devops
security
Paulius's avatar
Paulius
Icon for MVP rankMVP

locki I believe what you are looking for is dealing with URI::query which you can read up more at the following link.

https://clouddocs.f5.com/api/irules/URI__query.html

In addition I believe someone did something similar in the following link.

https://community.f5.com/t5/technical-forum/irule-to-block-uri-with-parameters-irrespective-of-uri-query/td-p/216167

Is the F5 working as your perimeter device and does it have WAF enabled on it? I think this situation might be better dealt with by using WAF rather than relying on a manually created and updated iRule to protect the entirety of your user base.

locki's avatar
locki
Icon for Nimbostratus rankNimbostratus
Jun 30, 2023

There is ASM on the box, on perimeter is FW then F5, I also think there must be better solution then some irule...

  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Jul 03, 2023

    locki I defer to Daniel_Wolf comment which is a great option that seems like it would work for you.