For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Saidur900's avatar
Saidur900
Icon for Nimbostratus rankNimbostratus
Aug 27, 2023

IRULE to restrict a specific url after initiated first session

Dear All I need help to make an irule for a reason. A and B both are clients. A is initiated a session from his device. A has an API result with some information with "xxx.com/api/info". After gett...
application delivery
iRules
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Aug 27, 2023

Hello Saidur900 , 

you can create an iRule or LTM policy has two conditions ( Source ip of user B & uri >> "xxx.com/api/info" ) 
and take action of dropping. 

I see that device id is not suitable as it forces you that user A and B must run the injected java script in bigip first response to create device id in bigip. 

I believe that you need a static identifier for user B such as static ip address for it.