Only allow specific URI through F5 for virtual server

One immediate issue: You're using the 'string tolower' function which will convert the URI to lower-case. However your match string includes upper-case characters, so your test will never match.

Change your test condition to all lower case, or remove 'tolower' if you need your match to be case-sensitive.

Also, is the asterisk actually part of the URI you are attempting to match? Don't include it if you're using it as a glob "match anything else". Just include the literal string you want to match with 'starts_with'.