Forum Discussion

BJL_01_139818's avatar
BJL_01_139818
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

Irule, Datagroup to whitelist certain ip addresses?

We have several customer that are being scanned (PCI, Penetration Tests etc.) and when that happens we have to whitelist a huge amount of ip addresses on our ASM   Is there a way to whitelist thes...
ASM Advanced WAF
irules
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Apr 04, 2019

Hi,

create your dg then use this irule:

when HTTP_REQUEST {
    if {[matchclass [IP::client_addr] equals bypass_asm_class]}{
         whitelist IP      
        ASM::disable
        return
    } else {
        do nothing
    }
}

Regards