Forum Discussion

Mex_119322's avatar
Mex_119322
Icon for Nimbostratus rankNimbostratus
Mar 04, 2015

iRule to apply ASM data guard per source address

Hi Guys,

 

I am looking to apply an iRule to mask card data dependent on the source address.

 

If SRC = 1.0.0.0/8 - Mask data.

 

If SRC = 1.1.1.0/24 - Allow card data.

 

Is this possible with an iRule?

 

Thanks Mex

 

application delivery
ASM Advanced WAF
devops
iRules
security

1 Reply

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Mar 04, 2015

    Hi,

     

    From the 11.5.0 version, you can unblock violations, but only in the request and not in the response.

     

    Why do not you create two ASM policies, one with and other without the data guard and then from the LTM policy, you choose the right way for your range IP? Am I wrong?