For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kaoutar's avatar
kaoutar
Icon for Cirrus rankCirrus
Mar 17, 2021

iRule to assign ASM policy to VS by domain name

Hello All, In order to reduce the amunt of public IPs assigned to our Web App, we decide to deploy multi apps in one VS, Im looking for a way to assign ASM policies to each web app according to the ...
ASM Advanced WAF
LTM
security
2019F5DevCentra's avatar
2019F5DevCentra
Icon for Cirrus rankCirrus
Mar 26, 2021

Yes, for example you have a VIP that works off of HTTPS - Stream Enabled of course -

This would be the ASM Policy Applied on the VIP, as traffic passes you disable the policy to the specific Domain within the iRule.

when HTTP_REQUEST {
 
 
 
	STREAM::disable
 
 
 
    switch -glob [string tolower [HTTP::host]] {
 
 
 
       "site1.com" {
 
          pool /Common/Pool1Site1
 
       }
 
       "site2.com" {
 
          pool /Common/Pool2Site2
 
           ASM::disable
 
       }
 
    }
 
 
 
}