newbie case sensitive question

Thanks for the reply,

 

We are using the F5 as an application layer filter to check requested URLs are authorised to be served from the web server.

 

 

One area of possibe problems we are attempting to protect is the possibility a developer may have left a test script, default scripts (or something) on a server and we want to make sure F5 only allows page requests to the web servers that have been approved should be allowed through.

 

We have several web servers and many developers.

 

 

Usually I try to name specific scripts that are allowd to run, but the currect web server has too many and I feel there would be a performance hit if I just supplied a long list of URLs to match.

 

 

I am open to better ways to deal with this type of issue if more experienced folk can throw some additional light onto this.

 

 

-Greg