Forum Discussion
Rich_L
Nimbostratus
May 25, 2017iRule to allow IP address that is being blocked by ASM Geo-location policy
We have an ASM security policy configured on our public facing Virtual Servers. We also enforce blocking access from countries that we do not allow in our Geo-Location policy. I am looking to allow...
Anesh
Cirrostratus
May 25, 2017Try below
when CLIENT_ACCEPTED {
if {[IP::client_addr] == "123.456.789.101"} {
set disable_asm 1
}else {
set disable_asm 0
}
}
when ASM_REQUEST_DONE {
if {$disable_asm==1}{
log local0. "[IP::client_addr]:[TCP::client_port]: unblocked for for this request."
ASM::unblock
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects