Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Dave_Clark's avatar
Dave_Clark
Icon for Nimbostratus rankNimbostratus
Jul 02, 2019

Limit URL without ASM

Is it possible, WITHOUT ASM, to limit a URL/URI to a specific path? Example: www.test.com/box/carboard and www.test.com/box/steel but not allow www.test.com or www.test.com/box?   Thanks
application delivery
big-ip
rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Jul 02, 2019

Yes it is possible to limit which URLs are reachable without having ASM/AWAF licensed & provisioned. You could create a datagroup with valid URI path values and then using an iRule or Local Traffic Policy block or redirect any request that didn't match one of the whitelisted URIs.