IRule for URL blocking with string starting with special character

Unlike the ASM suggests in this configuration, I have this as disallowed URI rather than disallowed URL.

 

So, if I thinking to that policy is to unique host/domain and that disallowed URI is explicit, I'd prefer to set in ASM "Disallowed URL" settings. So, I'm not sure about command to trigger ASM to block, just to unblock. Thus, you may need a second policy or some logic into the iRule to register the violation as an ASM event log, otherwise, you'll just drop the request and register "syslog", if needed.

 

It's just a point of view.

 

Regards.