Forum Discussion
Poka_367158
Nimbostratus
NimbostratusIllegal HTTP status in response with CDN
We have a F5-ASM, setup to only allow certain response status codes. All others are masked with a 200.
We are currently deploying a CDN and the challenge is that these error masked responses are bein...
samstep
Cirrocumulus
CirrocumulusHi Poka, if by "masking" you mean ASM Blocking page responding with HTTP 200 when the request is blocked by ASM Policy, then the solution can be easier. ASM blocking response page by default has HTTP Response Code 200, you have 2 options:
1) change the ASM Blocking Response page from HTTP 200 to another code which will not be masked - people most frequently change ASM response code to 403 Forbidden or to 503 Service Unavailable - 4xx and 5xx are not cached by CDN
2) leave ASM Blocking Response Page response code as 200 but add header:
Cache-Control: no-cache
to the ASM blocking response page, this will instruct CDN not to cache the blocking page.
I hope this helps,
Sam
