For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dan_103960's avatar
Dan_103960
Icon for Nimbostratus rankNimbostratus
Aug 18, 2011

Modify content in error 500 server response to client

I don't know if this is even possible yet but thought I'd bounce it out here.     I'm looking to see if there's a way to modify the content in an error 500 page being returned to the client to s...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 18, 2011
Hi Dan,

 

 

You could potentially do this using the ASM_RESPONSE_VIOLATION iRule event (v10.1.0+). You'd want to have the illegal status in response marked for alarming, but not blocking.

 

 

http://devcentral.f5.com/wiki/iRules.ASM_RESPONSE_VIOLATION.ashx

 

 

You can then use ASM::payload to get the current app payload.

 

 

Aaron