Forum Discussion
I want to Block A URL for my web application when it contains the following parameters
or %3A or $ or %24 please confirm if this can be possible . however i need to make sure my actual URL should not stop working.
- Stanislas_Piro2
Cumulonimbus
try this
when HTTP_REQUEST { if {[HTTP::query] contains "%3C" | [HTTP::query] contains "\$" | [HTTP::query] contains "%24"} { HTTP::respond 403 content {Content Rejected} } }
- Troy_Johnson_35
Nimbostratus
Here is a nice article on using ASM to use parameters to block a URL:
http://www.thef5guy.com/blog/2011/05/big-ip-asm-using-parameters-to-block-attacks/
- Frank_Nsubuga_3
Nimbostratus
Hi,
I know this is in LTM, but If you have ASM, I believe u/dakritt answered this question a while back in the link below: https://devcentral.f5.com/questions/asm-disallowed-url-and-wildcard-58982
You can use ASM to create an attack signature and block that, if those parameters are being sent as part of a user's request.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com