Forum Discussion
CirrocumulusIs it possible to select ASM BoT profile from irule?
Hi.
.
Is it possible to select BoT profile from irule?
.
Concept is we have different set of IP which need to allow "some" BoT type. That why we can't use whitelist IP in BoT profile because it will allow all BoT type.
So We want to use iRule to check if it IP A > use BoT profile which have some exception, but if all other IP > use normally BoT profile.
.
when HTTP_REQUEST {
# Check IP and select BoT profile from that
if { [IP::client_addr] eq "A" } {
ASM::enable allow_some_bot_profile
} else {
ASM::enable normally_bot_profile
}
}
ps. I didn't see any document about how to select BoT profile. So I'm not sure if ASM::enable can do that.
3 Replies
- Juergen_Mang
MVP
No, you can only enable or disable it:
https://clouddocs.f5.com/api/irules/BOTDEFENSE__enable.html
- Injeyan_Kostas
Nacreous
Taking up from this
you could forward these rewuests to another VS where the approriate Bot is selected
for examplewhen HTTP_REQUEST { if { [IP::client_addr] eq "A" } { BOTDEFENSE::disable virtual NEW_VS }This new VS will be a clone of your main, use a not routable IP as VIP, with just a different Bot Profile
- Nikoolayy1
Actually you can with Local Traffic Policy and by having default bot profile under the VIP.
