For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 22, 2014

Very odd. How about some debugging:

when HTTP_REQUEST {
    log local0. "incoming URI = [HTTP::uri]"
    if { ( [HTTP::cookie exists MRHSession] ) or ( [class match [string tolower [HTTP::uri]] starts_with my_private_uris] ) } {
        if { [HTTP::cookie exists MRHSession] } {
            log local0. "MRHSession cookie exists"
        }
        if { [class match [string tolower [HTTP::uri]] starts_with my_private_uris] } {
            log local0. "URI found in data group"
        }
        return
    } else {
        log local0. "Access disabled for this request"
        ACCESS::disable
        return
    }
}