Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Apr 29, 2020

Integrate mobile application with WAF

I have mobile app and I want to integrate it with WAF , the app using api and the server ip is used in api url ex: https://x.x.x.x/api , there is no domain name used. So I have assign public IP in v...
application delivery
ASM Advanced WAF
devops
irule
LTM
THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
May 02, 2020

Actually I have test that with ASM (not blocking mode) , but I noticed that the public ip does not reach the backend server. Cuz the first page in app is a login page, when I try to enter my user and pass there is a message show "user name or pass not correct" this is when the public ip placed in api url . But when i replace public ip with the backend ip in api url the app works fine.

 

The idea from adding public ip in api url is to pass traffic through WAF and that public ip should reach the backend ip . I don't know of this the way doing that or not.

 

Thanks

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
May 19, 2020

So, now you have VS with public api with WAF. Right? yes

  1. What does happen if you remove ASM policy from this VS? Does traffic pass to your server through VS or you have the same problem? i have not try it
  2. What error do you see in case of enter username/password with WAF? validation issue
  3. Do you see any requests on "Security ›› Event Logs : Application : Requests" page? If yes, then with what status (legal, alarmed, blocked)? no traffic

but if i try to access the api url through browser ex : https://82.x.x.x/api , i can see traffic in event log but with mobile application no traffic is showing.