Open Side Menu
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Forums
  3. Technical Forum

Forum Discussion

schusb's avatar
schusb
Icon for Nimbostratus rankNimbostratus
Dec 14, 2018

Is blocking all HTTP-HEAD requesta a bad idea?

We think about blocking all HTTP Head requests for our Web-Applications (not REST or SOAP) via ASM, by returning a html response page with HTTP-code 200 OK, because most of them are requests from cra...
access security
application security
ASM Advanced WAF
best practice
http-methods
security

AppWorld Berlin iRules Contest!

DevCentral News
announcement
appworld2026
berlin
event
irules

F5 AppWorld 2026 Las Vegas - iRules Contest Winners!

DevCentral News
announcement
appworld2026
contest
irules

Recent Discussions

  • Changes to DO and AS3 GitHub - no longer monitored
    Apr 30, 2026
    MJ_1024
  • SSL Forward Proxy, iRules and Client Hello
    Apr 30, 2026
    kuroki
  • monitor/healthcheck issue with envoy gateway
    Apr 30, 2026
    miodas
  • Recommendation for Adv. Lab
    Apr 30, 2026
    cirmuspts
  • How to Verify config before loading to F5
    Apr 29, 2026
    InquisitiveMai
Related Content
  • Logging/Blocking possible prompt injection
    Mar 10, 2026
    BeCur
  • Service Extensions with SSL Orchestrator: Advanced Blocking Pages
    Nov 26, 2025
    KevinGallaugher
  • Block IP after a number of ASM Blocks
    Apr 20, 2021
    Nicox99
  • Massive DDoS, DanaBot Dismantled, Scraped Discord Messages and Signal Blocks Windows Recall
    May 28, 2025
    Dharminder
  • domain blocking
    Jun 03, 2023
    MustphaBassim