For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Check1t_282465's avatar
Check1t_282465
Icon for Nimbostratus rankNimbostratus
Nov 16, 2017

IP Address Exception: How does a policy manage conflicting exceptions

Goal: For 10.0.0.0/8 range - Do not block (can add IP Address Exception for ASM Policy) - Learn (Can note learning in IP Exception setup) - BUT, for specific 20 IP in 10.0.0.0/8, Turn OFF learning (b...
ASM Advanced WAF
security
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Nov 16, 2017

From the help notes for ASM IP Address Exceptions

 

Note: If an IP address belongs to more than one range (using netmasks) so that there are overlapping IP address ranges, and one IP address is configured as Enabled on any setting on this screen, while another is configured as Disabled, the Enable action takes priority over the Disable action.