For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dan_103700's avatar
Dan_103700
Icon for Nimbostratus rankNimbostratus
May 25, 2011

IRule for Context-Specific ASM Error Page

I wrote a couple iRules to help provide some context to our users when they get dinged by the ASM. Basically, I wanted to pass in the URL of the page that generated the block, in addition to the "supp...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
May 25, 2011
Hi Dan,

I haven't tested this, but could you use HTTP::respond from ASM_REQUEST_BLOCKING to replace the redirect? 

when ASM_REQUEST_BLOCKING {
    set redirectTo "http://www.domain.com/not_found.htm?$asm_query_string"  
    HTTP::respond 302 Location $redirectTo
}

Also make sure to validate the query string on your PHP app which displays the error text. At a minimum you could HTML encode any text you display back to the user to avoid a XSS vulnerability.

Aaron