Forum Discussion

BJL_01_139818's avatar
BJL_01_139818
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

Irule, Datagroup to whitelist certain ip addresses?

We have several customer that are being scanned (PCI, Penetration Tests etc.) and when that happens we have to whitelist a huge amount of ip addresses on our ASM

 

Is there a way to whitelist these ip addresses through datagroups, so that ASM will not block?

 

Best Regards Brian

 

ASM Advanced WAF
iRules
security
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 04, 2019

    Hi,

    create your dg then use this irule:

    when HTTP_REQUEST {
    if {[matchclass [IP::client_addr] equals bypass_asm_class]}{
         whitelist IP      
        ASM::disable
        return
    } else {
        do nothing
    }
}

    Regards