Forum Discussion
AliCanS
Nimbostratus
NimbostratusiRule newbie - Whitelisting IP address for Spesific URL and Attack Pattern
Hello community, One of our third party applications have false-positive blocks for spesific attack pattern, which we want to whitelist, but as our f5 support explained that it cannot be done to ...
I think it can be done, but not w/ an ASM irule. I can't write this now, as I'm sick and on quick, but the idea is to take the asm policy off the vip, then use an irule like this:
- when http_request, check URI.
- if uri matches [list of disallowed uris], exit the irule.
- else, if no match, apply ASM policy.
I am going to tell you, though.. depending on traffic levels, this could get computationally expensive.
