For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 19, 2014

I believe, despite the wiki article saying otherwise, that you can just do this:

when HTTP_REQUEST { 
    if { ( [HTTP::path] eq "/rpc/rpcproxy.dll" ) and ( ( [HTTP::method] equals "RPC_IN_DATA" ) or ( [HTTP::method] equals "RPC_OUT_DATA" ) ) } { 
        ASM::disable
    } 
}