Forum Discussion

jokragly's avatar
jokragly
Icon for Nimbostratus rankNimbostratus
May 17, 2016

iRule with ASM URL filtering

I have a website that the developers would like to have one particular /path available for internal access but deny for external users. The trick is that we use ASM URL Filtering. I can certainly r...
application delivery
ASM Advanced WAF
iRules
security
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
May 17, 2016

It's essentially L7 IP-whitelist that you're looking for. You have two great solutions to choose from, one with a custom ASM violation (as an advantage, it would allow you to retain ASM logs); and another possible solution can be applied with the use of LTM Local Traffic Policies (best-match strategy; default action - enable ASM policy, conditional action - disable ASM)

 

For the first option, have a look at https://devcentral.f5.com/questions/ip-access-whitelist-when-using-asm

 

For the second option, look into Local Traffic Policies. It's very straight-forward. https://support.f5.com/kb/en-us/solutions/public/15000/000/sol15085.html