Need advise to setup a policy on F5

Question

We have a virtual server 172.16.0.180&nbsp; configured&nbsp; with port 443 .&nbsp;The pool is Netforumuat_PL_443 which has 4 members&nbsp;10.103.51.105 : 44310.103.51.106: 44310.103.51.107: 44310.103.51.108 : 443&nbsp;Requirementwe need a policy to be setup in F5 which can provide access to below URLs and reject other .&nbsp;https://partnersuat.rotary.org/xwebBrazilWeb/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebbadge/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebacquia/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebclubrunner/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebcluxprs/secure/netforumxml.asmx&nbsp;Could someone assist herein. Thankyou&nbsp;&nbsp;

f5_design_engineer · Answer

Hi Samit,
&nbsp;
Please refer the following article , and setup a basic policy and use the condition type as follows:https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-management-getting-started-with-policies/introducing-local-traffic-policies.html
&nbsp;

HTTP Host
Matches the host of an HTTP request.

host. Matches the host name.
port. Matches the port number.
full string. Matches the full host header string.

&nbsp;
Use the full string option 5 times to add all your 5 URL and then select the appropriate action and assign it to the desired virtual server IP = &nbsp;172.16.0.180
https://partnersuat.rotary.org/xwebBrazilWeb/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebbadge/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebacquia/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebclubrunner/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebcluxprs/secure/netforumxml.asmx
https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-management-getting-started-with-policies/introducing-local-traffic-policies.html
HTH🙏
&nbsp;

samitjadhav · Answer

Hi F5_Design_engineer,Thanks for the update. I have created the policy as attached. could you please verify if its ok .&nbsp;just wondering that the traffic will be https but I have selected http host according to your advise.&nbsp;&nbsp;Regards&nbsp;Samit&nbsp;

Forum Discussion

Need advise to setup a policy on F5

Recent Discussions

ASM Sync Between 2 Data Centers

Problems connecting to vpn after upgrading to ubuntu 24.04

F5 Hotfix

Bypass "Bad unescape" in Body POST (ASM, POST, JSON)

URL redirect

Related Content

Auditing Security Policy Updates

Minimizing Security Complexity: Managing Distributed WAF Policies

Looking for Setup Advice

LTM Policy

iControl REST Cookbook - LTM policy (ltm policy)