For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

prasad_mehta23_'s avatar
prasad_mehta23_
Icon for Nimbostratus rankNimbostratus
Sep 16, 2016

IRule for URL blocking with string starting with special character

We have a F5 ASM and LTM module implemented on AWS Cloud. The public traffic to our application server passes through F5. My requirement is to block the traffic with URL starting with https://www.abc.com/.b How do I achieve this ? Is iRule or ASM is the best suit for this ? What is the Irule configuration for this?

 

iRules
security

1 Reply

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Sep 16, 2016

    Unlike the ASM suggests in this configuration, I have this as disallowed URI rather than disallowed URL.

     

    So, if I thinking to that policy is to unique host/domain and that disallowed URI is explicit, I'd prefer to set in ASM "Disallowed URL" settings. So, I'm not sure about command to trigger ASM to block, just to unblock. Thus, you may need a second policy or some logic into the iRule to register the violation as an ASM event log, otherwise, you'll just drop the request and register "syslog", if needed.

     

    It's just a point of view.

     

    Regards.