For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dave_Clark's avatar
Dave_Clark
Icon for Nimbostratus rankNimbostratus
Jul 02, 2019

Limit URL without ASM

Is it possible, WITHOUT ASM, to limit a URL/URI to a specific path? Example: www.test.com/box/carboard and www.test.com/box/steel but not allow www.test.com or www.test.com/box?   Thanks
application delivery
BIG-IP
rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Jul 03, 2019

Yes it is possible to limit which URLs are reachable without having ASM/AWAF licensed & provisioned. You could create a datagroup with valid URI path values and then using an iRule or Local Traffic Policy block or redirect any request that didn't match one of the whitelisted URIs.