Forum Discussion

Songseajoon_222's avatar
Songseajoon_222
Icon for Nimbostratus rankNimbostratus
Mar 16, 2016

I want to division to browser type, using an iRule.

In APM, I want to division to browser type, using an iRule.

 

My Big-IP Version is 11.5.3

 

Using a VPE of APM

 

I made a irule

 

 

and then,

 

I Made Event iRule

 

I made Empty branch Rules : expr {[mcget {session.custom.username.start}] == "ie"}

 

 

But i was Deny.

 

Why?

 

Teach me made "iRule" and empty branch rule, plz

 

application delivery
BIG-IP Access Policy Manager (APM)
iRules
security

2 Replies

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Mar 16, 2016

    Hello,

     

    This event is triggered within a VPE only if you add a block named "irule event" and of course you assign the irule to the right Virtual Server.

     

    I think in your configuration, the event is never triggered, thus you go to fallback branch and get a deny.

     

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Mar 16, 2016

    You don't need an iRule to do this. You can create an empty action in the VPE and then in the branch rules do a custom expression and search for a string in the user-agent string.

    For example:

    Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 Safari/537.36

you could have an expression like

expr { [mcget { session.user.agent}] contains "Chrome" }

    Then in that branch rule have the logic you want it to follow.

    For IE you could have something like this:

    Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; AS; rv:11.0) like Gecko
Mozilla/5.0 (compatible, MSIE 11, Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

expr { [mcget { session.user.agent}] contains "MSIE" || [mcget { session.user.agent}] contains "rv:11.0" }

    This should account for all versions of IE.

    -Seth