Forum Discussion
Rich_L
Nimbostratus
May 25, 2017iRule to allow IP address that is being blocked by ASM Geo-location policy
We have an ASM security policy configured on our public facing Virtual Servers. We also enforce blocking access from countries that we do not allow in our Geo-Location policy. I am looking to allow...
David_Holmes_12
Jun 06, 2018Historic F5 Account
Re the update from 28-March. Wouldn't this iRule fail?
The first violation would always be "ILLEGAL_GEOLOCATION". ASM::unblock would then turn off ASM for the session. No other violations would be seen. So if the second request contained an SQL injection, it wouldn't be seen because ASM was now being bypassed?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects